Approved changes feed: RSS · Atom

cpe:2.3:h:audiocodes:median_500-msbr:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAudiocodes (c9d739e3-388b-5111-9d13-7f2977972a70)
ProductMedian 500 Msbr (7c6f441f-b822-5440-ab62-75d6e420d851)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9229 not_vulnerable 2026-06-03 14:40:48.883696 Details available
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can authenticate with the default 1234 password that cannot be changed, and can execute malicious and unauthorized actions.
Published: 2019-07-19T23:05:22.000Z
Updated: 2024-08-04T21:38:46.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9228 not_vulnerable 2026-06-03 14:40:48.879587 Details available
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot exhaustion) via 5 unauthenticated connection attempts, because the maximum number of unauthenticated clients that can be configured is 5. NOTE: the vendor's position is that this is a "design choice.
Published: 2019-07-19T22:45:35.000Z
Updated: 2024-08-04T21:38:46.568Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.