Known vulnerabilities in Device Manager Express
Vendor:
AudioCodes
Software:
Device Manager Express
Software CPE:
cpe:2.3:a:audiocodes:device_manager_express:*:*:*:*:*:*:*:*
Website:
https://www.audiocodes.com/
Total vulnerabilities:
6
Public exploits:
5
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72599 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24632 |
CWE-22 | Medium | - | 27.02.2023 |
SB2023022726 |
||
| #VU72590 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-24631 |
CWE-79 | Low | - | 27.02.2023 |
SB2023022726 |
||
| #VU72589 - Command injection CVE-2022-24630 |
CWE-77 | High | - | 27.02.2023 |
SB2023022726 |
||
| #VU72588 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24629 |
CWE-22 | High | - | 27.02.2023 |
SB2023022726 |
||
| #VU72583 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-24628 |
CWE-89 | Low | - | 27.02.2023 |
SB2023022726 |
||
| #VU72580 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-24627 |
CWE-89 | High | - | 27.02.2023 |
SB2023022726 |