CVE-2024-52884

An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501.841. Due to the use of weak password obfuscation/encryption, an attacker with access to configuration exports (INI) is able to decrypt the passwords.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-02-07

Last modified

2025-02-10

Weaknesses

CWE-327

Affected products

• Mediant Session Border Controller (Audiocodes)

References

• https://www.audiocodes.com/solutions-products/products/session-border-controllers-sbcs
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-078.txt