High · published November 19, 2025
🚨 An unauthenticated request can reveal sensitive files on AudioCodes Fax Server appliances, like an uninvited guest rifling through your file cabinet! 🔥 Think of it as having a key to a staff-only area in a restaurant where any passing diner can pick up confidential recipes—no one checks who you are or what you take! If an attacker exploits this vulnerability, they can access sensitive backup archives containing internal databases and admin password hashes. This could lead to a devastating breach, giving them the keys to the kingdom and the ability to manipulate critical configurations. That's a serious security threat! ⚡
Think of it as having a key to a staff-only area in a restaurant where any passing diner can pick up confidential recipes—no one checks who you are or what you take! This unauthenticated file read vulnerability in the download.php script allows remote users to access files based solely on attacker-provided path and filename parameters, bypassing access controls completely.
If an attacker exploits this vulnerability, they can access sensitive backup archives containing internal databases and admin password hashes. This could lead to a devastating breach, giving them the keys to the kingdom and the ability to manipulate critical configurations. That's a serious security threat! ⚡ Immediate action is required: upgrade your AudioCodes appliances to version 2.6.24 or later to close this loophole. In the meantime, restrict access to the download.php endpoint and review your file permissions to limit exposure. 🛡️ You've got this! Follow these steps, and you'll secure your systems in no time! 💪😊
| Product | Versions | Fixed in |
|---|---|---|
| audiocodes/fax_server | ≤ 2.6.23 | — |
| audiocodes/interactive_voice_response | ≤ 2.6.23 | — |