high7.2Public exploit code
CVE-2022-24630
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)2023-03-30 · webapps · php
Impact
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Audiocodes | Device Manager Express | through 7.8.20002.47752 |