← Database

CVE-2023-22957

HIGH CVSS: 7.5 Published: 2023-08-11 Modified: 2026-06-17

Description

An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root password.

Affected Platforms

Audiocodes C455Hd FirmwareAudiocodes C435Hd FirmwareAudiocodes C450Hd FirmwareAudiocodes 445HdAudiocodes 405HdAudiocodes 405Hd FirmwareAudiocodes C470HdAudiocodes C450HdAudiocodes 445Hd FirmwareAudiocodes C455Hd

Weakness Type

CWE-798

References