CVE-2018-18567

Опубликовано: 24 окт. 2018

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.

Ссылки

http://www.securitytracker.com/id/1041956
Third Party Advisory
VDB Entry
https://seclists.org/bugtraq/2018/Oct/32
Exploit
Mailing List
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-026.txt
Exploit
Third Party Advisory
http://www.securitytracker.com/id/1041956
Third Party Advisory
VDB Entry
https://seclists.org/bugtraq/2018/Oct/32
Exploit
Mailing List
Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-026.txt
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:audiocodes:440hd_firmware:*:*:*:*:*:*:*:*

Версия до 3.1.2.89 (включая)

cpe:2.3:h:audiocodes:440hd:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:audiocodes:450hd_firmware:*:*:*:*:*:*:*:*

Версия до 3.1.2.89 (включая)

cpe:2.3:h:audiocodes:450hd:-:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00694

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-8vph-24qm-4xg2