Approved changes feed: RSS · Atom

cpe:2.3:o:akuvox:e11_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorAkuvox (cfc8aa59-08df-5b56-a861-3a192dc4fb75)
ProductE11 Firmware (797b5aa1-85da-5cf0-85ef-8d8262b6cadf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0355 vulnerable 2026-06-08 05:52:04.795593 CVE-2023-0355
MEDIUM (6.5)
Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.
Published: 2023-03-13T19:57:47.690Z
Updated: 2025-01-16T21:46:04.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0354 vulnerable 2026-06-08 05:52:04.790979 CVE-2023-0354
CRITICAL (9.1)
The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs.
Published: 2023-03-13T20:04:43.540Z
Updated: 2025-01-16T21:45:36.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0353 vulnerable 2026-06-08 05:52:04.790476 CVE-2023-0353
HIGH (7.2)
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file.
Published: 2023-03-13T20:07:22.716Z
Updated: 2025-01-16T21:45:17.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0352 vulnerable 2026-06-08 05:52:04.790046 CVE-2023-0352
CRITICAL (9.1)
The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default.
Published: 2023-03-13T20:15:51.389Z
Updated: 2025-01-16T21:55:06.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0351 vulnerable 2026-06-08 05:52:04.789621 CVE-2023-0351
HIGH (8.8)
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.
Published: 2023-03-13T20:22:01.322Z
Updated: 2025-01-16T21:54:58.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0350 vulnerable 2026-06-08 05:52:04.789182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0349 vulnerable 2026-06-08 05:52:04.788692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0348 vulnerable 2026-06-08 05:52:04.788258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0347 vulnerable 2026-06-08 05:52:04.787921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0346 vulnerable 2026-06-08 05:52:04.787446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0345 vulnerable 2026-06-08 05:52:04.787089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0344 vulnerable 2026-06-08 05:52:04.786648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.