Akuvox vulnerabilities
We track 2 vulnerabilities in Akuvox products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2023.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Akuvox vulnerabilities
- 7.5 High severity
E11: Use of Insufficiently Random Values
Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages.
- 8.8 High severity
E11: Improper Neutralization of Special Elements used in a Command
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.