CNNVD-202511-2200 Information
CNNVD ID
CNNVD-202511-2200
Related CVE
- CNNVD Published: 2025-11-19
Description (Chinese)
AudioCodes Fax Server是以色列AudioCodes公司的一个传真服务器。 AudioCodes Fax Server 2.6.23及之前版本存在安全漏洞,该漏洞源于过度宽松的文件系统权限,可能导致任意代码执行。
Description (English)
AudioCodes Fax Server is a fax server for the Israeli company AudioCodes. AudioCodes Fax Server 2.6.23 and previous versions had a security loophole, which stemmed from overly liberal document system privileges and could lead to arbitrary code enforcement.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
AudioCodes
Published
2025-11-19
Last Modified
2026-02-24
References
https://www.audiocodes.com/media/g1in2u2o/0548-product-notice-end-of-service-for-audiocodes-auto-attendant-ivr-solution.pdf https://www.vulncheck.com/advisories/audiocodes-fax-ivr-appliance-world-writable-webroot-lpe https://pierrekim.github.io/advisories/2025-audiocodes-fax-ivr.txt https://pierrekim.github.io/blog/2025-11-20-audiocodes-fax-ivr-8-vulnerabilities.html https://access.redhat.com/security/cve/cve-2025-34333
Share on: