VendorsAudioCodes420hd_ip_phoneall versions
Vulnerabilities

AudioCodes 420HD IP Phone

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-10093
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.
Published 2019-03-17 · Modified
9.01 PoCEPSS 0.682
CVE-2018-5757
An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to Remote Code Execution via shell metacharacters in the query string.
Published 2019-04-01 · Modified
9.0EPSS 0.076
CVE-2018-10091
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS.
Published 2019-03-17 · Modified
4.8EPSS 0.008