CVE-2023-22956

Description

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information.

Weakness classification

• CWE-798: Use of Hard-coded Credentials

Primary references

• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Not Applicable
• cve@mitre.org — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory