CVE-2018-16219

A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the…

published April 25, 2019

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change the admin password without authentication via a POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01216 · 68.2th percentile
Published
2019-04-25T19:56Z
EPSS history
Timeline
  • 25 APR 19:56Z
    A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the…
    cvelistv5