CVE-2023-0348

Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-03-13

Last modified

2025-01-16

Affected products

• E11 (Akuvox)
• E11 Firmware (Akuvox)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01