What’s Vulnerable › Vulnerabilities
CVE-2019-9228
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-07-19 · updated 2026-06-17
Description
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot exhaustion) via 5 unauthenticated connection attempts, because the maximum number of unauthenticated clients that can be configured is 5. NOTE: the vendor's position is that this is a "design choice.
Affected products
- Audiocodes Median 500-Msbr Firmware: from f7.20a through f7.20a.252.062
- Audiocodes Median 500L-Msbr Firmware: from f7.20a through f7.20a.252.062
- Audiocodes Median 800C-Msbr Firmware: from f7.20a through f7.20a.252.062
- Audiocodes Median M800B-Msbr Firmware: from f7.20a through f7.20a.252.062
References
- https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
- https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
Get alerted when CVE-2019-9228 or the next vulnerability affects your stack