High · published November 19, 2025
⚡ An authenticated command injection vulnerability lurks in the license activation process of AudioCodes appliances, where a crafty filename can unleash chaos! 🔥 Think of it like a restaurant that prepares a meal based on a special order — but the kitchen doesn’t check what’s actually written down. If someone sneaks in a note with secret ingredients, they could end up creating a dish that’s not just unexpected, but downright dangerous! An attacker with access to this upload interface could execute arbitrary commands with the power of NT AUTHORITY\SYSTEM. This means they could potentially gain full control over the server, steal sensitive data, or even cripple operations — talk about a recipe for disaster!
Think of it like a restaurant that prepares a meal based on a special order — but the kitchen doesn’t check what’s actually written down. If someone sneaks in a note with secret ingredients, they could end up creating a dish that’s not just unexpected, but downright dangerous! The vulnerability arises when an authenticated user uploads a license file. The application carelessly combines the upload's extension into a command line without validating or escaping it, allowing malicious commands to be executed on the server.
An attacker with access to this upload interface could execute arbitrary commands with the power of NT AUTHORITY\SYSTEM. This means they could potentially gain full control over the server, steal sensitive data, or even cripple operations — talk about a recipe for disaster! To secure your environment, first, patch your AudioCodes appliances to version 2.6.24 or later. Additionally, review your authentication controls and consider implementing stricter validations on user inputs during the license upload process. You’re on the right path! By taking these steps, you’ll bolster your defenses and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| audiocodes/fax_server | ≤ 2.6.23 | — |
| audiocodes/interactive_voice_response | < 2.6.23 | 2.6.23 |