CVEvulnerability
CVE-2023-0348
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device.
Affected configurations
• akuvox e11 firmware
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01 Third Party Advisory, US Government Resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01 Third Party Advisory, US Government Resource