CVE-2023-0348

High

7.5/10

Summary

Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

References

Advisory Timeline

Published Mar 13, 2023

CVE-2023-0348

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS