383
VMScore

CVE-2018-18567

Published: 24/10/2018 Updated: 07/12/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

AudioCodes 440HD and 450HD devices 3.1.2.89 and previous versions allows man-in-the-middle malicious users to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

audiocodes 440hd_firmware

audiocodes 450hd_firmware

Exploits

AudioCodes 440HD / 450HD IP Phone versions 31289 and below suffer from a man-in-the-middle vulnerability ...