Vulnerability Details CVE-2018-16219
A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change the admin password without authentication via a POST request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.3%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 3.3
References
Products affected by CVE-2018-16219
-
cpe:2.3:h:audiocodes:405hd:-
-
cpe:2.3:o:audiocodes:405hd_firmware:2.2.12