CVE-2023-0348: High severity akuvox e11 firmware vulnerability

Published Mar 13, 2023

Updated

Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device.

Affected Software

3 affected components

Akuvox E11

Akuvox E11 Firmware

Akuvox E11

Event History

Mar 13, 2023

CVE Published

via MITRE·08:24 PM

Data Sourced

via MITRE·08:24 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-068-01

Frequently Asked Questions

What is the severity of CVE-2023-0348?

CVE-2023-0348 is considered a high-severity vulnerability due to the lack of access control, allowing potential unauthorized SIP calls.

How do I fix CVE-2023-0348?

To mitigate CVE-2023-0348, implement strict access controls on the SIP servers and ensure only authorized devices can communicate.

What devices are affected by CVE-2023-0348?

CVE-2023-0348 affects the Akuvox E11 firmware, allowing unauthorized SIP calls between devices.

What potential risks are associated with CVE-2023-0348?

The risks include unauthorized communication between devices, which could lead to eavesdropping or further exploitation.

Is there a workaround for CVE-2023-0348?

A potential workaround is to configure firewalls to limit SIP traffic to only trusted devices while a permanent fix is being developed.