Vulnerabilities
Summary — last 7 days
New vulnerabilities5,119▲ 1,971 vs. last week
Critical / high2,827▲ 1,288 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)197▼ 10 vs. last week
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 1.4% | — | Audiocodes C470hd FirmwareAudiocodes C455hd FirmwareAudiocodes C435hd FirmwareAudiocodes 445hd Firmware+2 | 8/11/2023 | 6/17/2026 | An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root password. | |
| Modified | High (7.5) | 1.4% | — | Audiocodes C470hd FirmwareAudiocodes C455hd FirmwareAudiocodes C435hd FirmwareAudiocodes 445hd Firmware+2 | 8/11/2023 | 6/17/2026 | An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information. | |
| Analyzed | High (7.8) | 0.31% | — | Audiocodes 445hd FirmwareAudiocodes 405hd FirmwareAudiocodes C450hd Firmware | 8/11/2023 | 6/17/2026 | An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for different firmware components. Thus, by knowing how to calculate and where to store the required checksums for the flasher tool, an attacker is able to store… | |
| Modified | Medium (5.9) | 1.2% | — | Audiocodes 440hd FirmwareAudiocodes 450hd Firmware | 10/24/2018 | 6/17/2026 | AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business. |