CVE-2023-0350: Medium severity akuvox e11 firmware vulnerability

Published Mar 13, 2023

Updated

Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type.

Affected Software

3 affected components

Akuvox E11

Akuvox E11 Firmware

Akuvox E11

Event History

Mar 13, 2023

CVE Published

via MITRE·08:22 PM

Data Sourced

via MITRE·08:22 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-068-01

Frequently Asked Questions

What is the severity of CVE-2023-0350?

CVE-2023-0350 is considered a high severity vulnerability due to its potential for file upload attacks.

How do I fix CVE-2023-0350?

To fix CVE-2023-0350, update the Akuvox E11 firmware to the latest version where the vulnerability has been patched.

What is the impact of CVE-2023-0350?

The impact of CVE-2023-0350 allows attackers to upload malicious files by altering their extensions, potentially leading to unauthorized access.

Which devices are affected by CVE-2023-0350?

CVE-2023-0350 affects the Akuvox E11 firmware and associated devices.

Is CVE-2023-0350 exploitative in the wild?

As of the latest information, there is no public indication that CVE-2023-0350 is being actively exploited in the wild.