medium6.5
CVE-2023-0350
Akuvox E11 does not ensure that a file extension is associated with the file provided.
Impact
Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Akuvox | E11 Firmware | All versions |