CVE-2023-22955

Summary

CVE-2023-22955 is a vulnerability affecting AudioCodes VoIP desk phones up to version 3.4.4.1000. This issue arises due to inadequate firmware image validation, where only simple checksum checks are employed for various components. Consequently, an attacker with knowledge of the checksum calculation method and the ability to manipulate the flasher tool can exploit this weakness and install malicious firmware, potentially compromising the affected device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.