Critical · published November 19, 2025
🚨 An unsecured backup upload endpoint could spell disaster for your AudioCodes appliances! Think of it like leaving a back door to your server wide open, where anyone can sneak in and unpack a suitcase full of malicious files—no questions asked! 🏰 An attacker could upload dangerous web server files that turn your system into a playground for malicious commands, all executing with the authority of the system account. This means they could potentially manipulate sensitive data, compromise your infrastructure, or even take full control of your system—talk about a security nightmare! 🔥
Think of it like leaving a back door to your server wide open, where anyone can sneak in and unpack a suitcase full of malicious files—no questions asked! 🏰 The vulnerability in AudioCodes Fax Server and Auto-Attendant IVR appliances allows unauthenticated file uploads via ajaxBackupUploadFile.php, allowing an attacker to upload executable files as backups without authentication, leading to arbitrary command execution on the server.
An attacker could upload dangerous web server files that turn your system into a playground for malicious commands, all executing with the authority of the system account. This means they could potentially manipulate sensitive data, compromise your infrastructure, or even take full control of your system—talk about a security nightmare! 🔥 Patching to version 2.6.24 or higher is crucial to close this vulnerability. Meanwhile, consider restricting access to the backup upload endpoint and implementing proper authentication and file validation to enhance security. Don't ignore those default configurations, as they can be a goldmine for attackers! 🛡️ You've got this! With these steps, you'll shut that backdoor and keep your systems safe from unwanted guests! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| audiocodes/fax_server | ≤ 2.6.23 | — |
| audiocodes/interactive_voice_response | ≤ 2.6.23 | — |