CVE-2022-24630

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

23.89% chance of exploitation in the next 30 days, 98th percentile

Published

2023-05-29

Updated

2025-01-14

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51145

References

• CVE Record
• NVD entry

Related

• CVE-2022-24629
• CVE-2022-24632
• CVE-2022-24627
• CVE-2022-24637
• CVE-2022-24620
• CVE-2022-24643