CVE-2019-12327

Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet

High · published July 22, 2019

CVSS v3.0
7.2
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01896 · 79.5th percentile
Published
2019-07-22T17:30Z
EPSS history
Timeline
  • 22 JUL 17:30Z
    Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet
    cvelistv5