CVE-2019-9231 An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in th...
HighCVSS 8.8
EPSS 0.74%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions, because CSRFProtection=1 is not a default and is not documented.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| audiocodes mediant 500l-msbr firmware | >= f7.20a, < f7.20a.202.307 | f7.20a.202.307 |
| audiocodes mediant 500-mbsr firmware | >= f7.20a, < f7.20a.202.307 | f7.20a.202.307 |
| audiocodes mediant m800b-msbr firmware | >= f7.20a, < f7.20a.202.307 | f7.20a.202.307 |
| audiocodes mediant 800c-msbr firmware | >= f7.20a, < f7.20a.202.307 | f7.20a.202.307 |
References
- www.cirosec.de third-party-advisory