CVE-2019-12327: Critical severity akuvox sp-r50p vulnerability
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12327?
CVE-2019-12327 is classified as a high severity vulnerability due to the presence of hardcoded credentials that can be exploited remotely.
How do I fix CVE-2019-12327?
There is no fix available for CVE-2019-12327 as the hardcoded credentials cannot be changed and the Telnet service cannot be disabled.
What systems are affected by CVE-2019-12327?
CVE-2019-12327 specifically affects the Akuvox SP-R50P VoIP phone running firmware version 50.0.6.156.
What type of attack can be executed using CVE-2019-12327?
An attacker can gain unauthorized access to the Akuvox SP-R50P device via Telnet, enabling potential manipulation or compromise.
Is the Telnet service vulnerable in CVE-2019-12327?
Yes, the Telnet service running on port 2323 is vulnerable due to hardcoded credentials, which cannot be deactivated.