Skip to content
Noroxi

audiocodes records

33 published records for vendor audiocodes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 23
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

33 records
  • CVE-2018-10093
    55Plan

    AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

    HighCVSS 8.8Proof of conceptEPSS 68%

    audiocodes · 420hd ip phone firmwareMar 21, 2019

  • CVE-2022-24629
    50Plan

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2022-24627
    47Plan

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2025-32106
    39Monitor

    In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability

    CriticalCVSS 9.8No exploitEPSS 1%

    audiocodes · mp-112 firmwareJun 3, 2025

  • CVE-2018-5757
    37Monitor

    An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106.

    HighCVSS 8.8No exploitEPSS 8%

    audiocodes · 420hd ip phone firmwareApr 1, 2019

  • CVE-2025-34329
    37Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php

    CriticalCVSS 9.3No exploitEPSS 1%

    audiocodes · fax serverNov 19, 2025

  • CVE-2025-34328
    37Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Upload RCE via ajaxScript.php

    CriticalCVSS 9.3No exploitEPSS 1%

    audiocodes · fax serverNov 19, 2025

  • CVE-2022-24630
    35Monitor

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    HighCVSS 7.2Proof of conceptEPSS 24%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2025-34334
    35Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPE

    HighCVSS 8.7No exploitEPSS 3%

    audiocodes · fax serverNov 19, 2025

  • CVE-2025-34335
    35Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via ActivateLicense.php

    HighCVSS 8.7No exploitEPSS 3%

    audiocodes · fax serverNov 19, 2025

  • CVE-2018-16219
    35Monitor

    A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the s

    HighCVSS 8.8No exploitEPSS 1%

    audiocodes · 405hd firmwareApr 25, 2019

  • CVE-2019-9231
    35Monitor

    An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.

    HighCVSS 8.8No exploitEPSS 1%

    audiocodes · mediant 500l-msbr firmwareJul 18, 2019

  • CVE-2019-9229
    35Monitor

    An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.

    HighCVSS 8.8No exploitEPSS 1%

    audiocodes · median 500l-msbr firmwareJul 19, 2019

  • CVE-2025-34331
    34Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Read via download.php

    HighCVSS 8.7No exploitEPSS 1%

    audiocodes · fax serverNov 19, 2025

  • CVE-2025-34332
    34Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE

    HighCVSS 8.5No exploitEPSS 0%

    audiocodes · fax serverNov 19, 2025

  • CVE-2025-34333
    34Monitor

    AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE

    HighCVSS 8.5No exploitEPSS 0%

    audiocodes · fax serverNov 19, 2025

  • CVE-2022-24631
    33Monitor

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

    MediumCVSS 5.4No exploitEPSS 41%

    audiocodes · device manager expressMay 29, 2023

  • CVE-2018-16216
    33Monitor

    A command injection (missing input validation, escaping) in the monitoring or memory status web interface in AudioCodes 405HD (firmware 2.2.

    HighCVSS 8.0No exploitEPSS 4%

    audiocodes · 405hd firmwareApr 25, 2019

  • CVE-2019-9228
    31Monitor

    An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least t

    HighCVSS 7.5No exploitEPSS 2%

    audiocodes · median 500l-msbr firmwareJul 19, 2019

  • CVE-2023-22955
    31Monitor

    An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.

    HighCVSS 7.8No exploitEPSS 0%

    audiocodes · 445hd firmwareAug 11, 2023

  • CVE-2023-22956
    30Monitor

    An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.

    HighCVSS 7.5No exploitEPSS 1%

    audiocodes · c470hd firmwareAug 11, 2023

  • CVE-2023-22957
    30Monitor

    An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000.

    HighCVSS 7.5No exploitEPSS 1%

    audiocodes · c470hd firmwareAug 11, 2023

  • CVE-2024-52883
    30Monitor

    An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

    HighCVSS 7.5No exploitEPSS 1%

    audiocodes · one voice operations centerFeb 7, 2025

  • CVE-2024-52881
    30Monitor

    An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

    HighCVSS 7.5No exploitEPSS 0%

    audiocodes · one voice operations centerFeb 7, 2025

  • CVE-2024-52884
    30Monitor

    An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501.841.

    HighCVSS 7.5No exploitEPSS 0%

    audiocodes · mediant session border controllerFeb 7, 2025