High severity · published Jul 20, 2019
CVE-2019-9229
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251
8.8
CVSS
0.6%
EPSS
No
On KEV
Description
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can authenticate with the default 1234 password that cannot be changed, and can execute malicious and unauthorized actions.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M5
Median 500-msbr Firmware · Audiocodes
f7.20a through f7.20a.251 · source: NVD
M5
Median 500l-msbr Firmware · Audiocodes
f7.20a through f7.20a.251 · source: NVD
M8
Median 800c-msbr Firmware · Audiocodes
f7.20a through f7.20a.251 · source: NVD
MM
Median M800b-msbr Firmware · Audiocodes
f7.20a through f7.20a.251 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-9229
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-9229
Third Party Advisory
https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
More from Median 500-msbr Firmware
7.5
CVE-2019-9228
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062