What’s Vulnerable › Vulnerabilities

CVE-2019-12327

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-22 · updated 2026-06-17
• Weakness: CWE-798

Description

Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed.

Affected products

• Akuvox Sp-R50P Firmware: 50.0.6.156

References

• https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Akuvox_R50P.pdf
• https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Akuvox_R50P.pdf

Get alerted when CVE-2019-12327 or the next vulnerability affects your stack