A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change the admin password without authentication via a POST request.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-04-25T19:56:44

Updated: 2024-08-05T10:17:38.331Z

Reserved: 2018-08-30T00:00:00

Link: CVE-2018-16219

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-04-25T20:29:01.850

Modified: 2024-11-21T03:52:18.327

Link: CVE-2018-16219

cve-icon Redhat

No data.