Critical · published November 19, 2025
🚨 An unauthenticated script-management endpoint could let attackers unleash chaos on your AudioCodes Fax Server! 🔥 Think of it like a restaurant where anyone can not only walk in but also change the menu behind the counter. With this vulnerability, an attacker could serve up malicious scripts directly from the kitchen, potentially compromising the whole establishment. An attacker could write arbitrary files into the web-accessible directory, which means they could execute any command they wish on your system with system-level privileges. This could lead to unauthorized data access, service disruption, or even total system control — an absolute nightmare for your security!
Think of it like a restaurant where anyone can not only walk in but also change the menu behind the counter. With this vulnerability, an attacker could serve up malicious scripts directly from the kitchen, potentially compromising the whole establishment. CVE-2025-34328 affects AudioCodes Fax Server and Auto-Attendant IVR appliances up to version 2.6.23 by exposing an unauthenticated script-management endpoint. This allows attackers to write files into server-side paths and execute them under NT AUTHORITY\SYSTEM privileges.
An attacker could write arbitrary files into the web-accessible directory, which means they could execute any command they wish on your system with system-level privileges. This could lead to unauthorized data access, service disruption, or even total system control — an absolute nightmare for your security! Immediate action is crucial! Patch your system to version 2.6.24 or higher to close this critical vulnerability. Additionally, restrict access to the web administration interface and monitor for any unusual activity to safeguard your system. You've got this! Take these steps now, and you'll be a security hero in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| audiocodes/fax_server | ≤ 2.6.23 | — |
| audiocodes/interactive_voice_response | ≤ 2.6.23 | — |