CVE-2019-9231

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307

published July 18, 2019

CVSS
—
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions, because CSRFProtection=1 is not a default and is not documented.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Published
2019-07-18T15:22Z
EPSS history
Timeline
  • 18 JUL 15:22Z
    An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307
    cvelistv5