Approved changes feed: RSS · Atom

cpe:2.3:h:akuvox:e11:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAkuvox (cfc8aa59-08df-5b56-a861-3a192dc4fb75)
ProductE11 (4d72003c-5a7b-51cf-90c1-da2b383c3341)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0355 not_vulnerable 2026-06-08 05:52:04.795619 CVE-2023-0355
MEDIUM (6.5)
Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.
Published: 2023-03-13T19:57:47.690Z
Updated: 2025-01-16T21:46:04.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0354 not_vulnerable 2026-06-08 05:52:04.791000 CVE-2023-0354
CRITICAL (9.1)
The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs.
Published: 2023-03-13T20:04:43.540Z
Updated: 2025-01-16T21:45:36.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0353 not_vulnerable 2026-06-08 05:52:04.790583 CVE-2023-0353
HIGH (7.2)
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file.
Published: 2023-03-13T20:07:22.716Z
Updated: 2025-01-16T21:45:17.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0352 not_vulnerable 2026-06-08 05:52:04.790071 CVE-2023-0352
CRITICAL (9.1)
The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default.
Published: 2023-03-13T20:15:51.389Z
Updated: 2025-01-16T21:55:06.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0351 not_vulnerable 2026-06-08 05:52:04.789648 CVE-2023-0351
HIGH (8.8)
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.
Published: 2023-03-13T20:22:01.322Z
Updated: 2025-01-16T21:54:58.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0350 not_vulnerable 2026-06-08 05:52:04.789208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0349 not_vulnerable 2026-06-08 05:52:04.788714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0348 not_vulnerable 2026-06-08 05:52:04.788386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0347 not_vulnerable 2026-06-08 05:52:04.787942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0346 not_vulnerable 2026-06-08 05:52:04.787586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0345 not_vulnerable 2026-06-08 05:52:04.787112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0344 not_vulnerable 2026-06-08 05:52:04.786697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0343 not_vulnerable 2026-06-08 05:52:04.784808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.