critical9.8Public exploit code
CVE-2022-24627
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)2023-03-30 · webapps · php
Impact
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Audiocodes | Device Manager Express | through 7.8.20002.47752 |