8
CVEs
2
Critical
5
High
0
KEV
8
PoC
7
Unpatched C/H
0.0%
Patch Rate
0.7%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
5
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (25)
Fax Server
8
Interactive Voice Response
8
PHP
7
C450Hd Firmware
3
Windows
3
One Voice Operations Center
3
445Hd Firmware
3
405Hd Firmware
3
Median 800C Msbr Firmware
2
Mediant 500 Mbsr Firmware
2
Mediant M800B Msbr Firmware
2
C455Hd Firmware
2
Median M800B Msbr Firmware
2
C470Hd Firmware
2
Median 500L Msbr Firmware
2
C435Hd Firmware
2
Mediant 500L Msbr Firmware
2
Mediant 800C Msbr Firmware
2
Median 500 Msbr Firmware
2
Mediant Session Border Controller
1
440Hd Firmware
1
Mp 114 Firmware
1
450Hd Firmware
1
Mp 118 Firmware
1
Mp 112 Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-34328 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.3 | 0.6% | – |
PoC
No patch
|
| CVE-2025-34329 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.3 | 3.1% | – |
PoC
No patch
|
| CVE-2025-34330 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated prompt upload endpoint at. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 6.9 | 0.7% | – |
PoC
No patch
|
| CVE-2025-34331 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.7 | 0.1% | – |
PoC
No patch
|
| CVE-2025-34332 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windows services using helper batch scripts. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.0% | – |
PoC
No patch
|
| CVE-2025-34333 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly permissive file system permissions. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.0% | – |
PoC
No patch
|
| CVE-2025-34334 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality implemented by. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.7 | 0.3% | – |
PoC
No patch
|
| CVE-2025-34335 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.7 | 0.7% | – |
PoC
No patch
|