CVE-2023-22955 | BDVDB-2026-209455 Detail

audiocodes_ltdvoip_phones

Description#

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for different firmware components. Thus, by knowing how to calculate and where to store the required checksums for the flasher tool, an attacker is able to store malicious firmware.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://syss.de
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-055.txt
http://seclists.org/fulldisclosure/2023/Aug/17
http://packetstormsecurity.com/files/174214/AudioCodes-VoIP-Phones-Insufficient-Firmware-Validation.html

Exploit#

No public exploit known

History#

Version 12023-08-11Record published in the CVE List.
Version 22024-10-10Most recent update recorded in the CVE List.