E11 vulnerabilities

2 known vulnerabilities in E11 from Akuvox. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  E11: Use of Insufficiently Random Values

  CVE-2023-0343Mar 31, 2023Akuvox

  Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, and this may allow an attacker to decrypt messages.

• 8.8 High severity

  E11: Improper Neutralization of Special Elements used in a Command

  CVE-2023-0351Mar 13, 2023AkuvoxEPSS 1.33%

  The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.