CVE-2023-0351

The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.

Score

CVSS 3.1 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-03-13

Last modified

2025-01-16

Weaknesses

CWE-77

Affected products

• E11 (Akuvox)
• E11 Firmware (Akuvox)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01