Approved changes feed: RSS · Atom

cpe:2.3:a:akuvox:e11:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAkuvox (cfc8aa59-08df-5b56-a861-3a192dc4fb75)
ProductE11 (4d72003c-5a7b-51cf-90c1-da2b383c3341)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0354 vulnerable 2026-06-08 05:52:04.790951 CVE-2023-0354
CRITICAL (9.1)
The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs.
Published: 2023-03-13T20:04:43.540Z
Updated: 2025-01-16T21:45:36.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0353 vulnerable 2026-06-08 05:52:04.790351 CVE-2023-0353
HIGH (7.2)
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file.
Published: 2023-03-13T20:07:22.716Z
Updated: 2025-01-16T21:45:17.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0352 vulnerable 2026-06-08 05:52:04.789925 CVE-2023-0352
CRITICAL (9.1)
The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default.
Published: 2023-03-13T20:15:51.389Z
Updated: 2025-01-16T21:55:06.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0351 vulnerable 2026-06-08 05:52:04.789589 CVE-2023-0351
HIGH (8.8)
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.
Published: 2023-03-13T20:22:01.322Z
Updated: 2025-01-16T21:54:58.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0350 vulnerable 2026-06-08 05:52:04.789061 CVE-2023-0350
MEDIUM (6.5)
Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type.
Published: 2023-03-13T20:22:53.970Z
Updated: 2025-01-16T21:54:51.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0349 vulnerable 2026-06-08 05:52:04.788664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0348 vulnerable 2026-06-08 05:52:04.788230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0347 vulnerable 2026-06-08 05:52:04.787892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0346 vulnerable 2026-06-08 05:52:04.787415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0345 vulnerable 2026-06-08 05:52:04.787055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0344 vulnerable 2026-06-08 05:52:04.785395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0343 vulnerable 2026-06-08 05:52:04.783470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.