[FD] Use of Hard-coded Cryptographic Key (CWE-321) / CVE-2023-22957

2023-08-15 Thread Moritz Abrell via Fulldisclosure
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Advisory ID: SYSS-2022-052 Product: AudioCodes VoIP Phones Manufacturer: AudioCodes Ltd. Affected Version(s): Firmware Versions >= 3.4.8.M4 Tested Version(s): Firmware Version 3.4.4.1000 Vul

[FD] Use of Hard-coded Cryptographic Key (CWE-321) / CVE-2023-22956

2023-08-15 Thread Moritz Abrell via Fulldisclosure
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Advisory ID: SYSS-2022-054 Product: AudioCodes VoIP Phones Manufacturer: AudioCodes Ltd. Affected Version(s): Firmware Versions >= 3.4.8.M4 Tested Version(s): Firmware Version 3.4.4.1000 Vul

[FD] Missing Immutable Root of Trust in Hardware (CWE-1326) / CVE-2023-22955

2023-08-15 Thread Moritz Abrell via Fulldisclosure
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Advisory ID: SYSS-2022-055 Product: AudioCodes VoIP Phones Manufacturer: AudioCodes Ltd. Affected Version(s): Firmware Versions >= 3.4.4.1000 Tested Version(s): Firmware Version 3.4.4.1000 V