What’s Vulnerable › Vulnerabilities

CVE-2019-9230

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-18 · updated 2026-06-17
• Weakness: CWE-79

Description

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the search function of the management web interface allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

Affected products

• Audiocodes Mediant 500-Mbsr Firmware: from f7.20a through f7.20a.253
• Audiocodes Mediant 500L-Msbr Firmware: from f7.20a through f7.20a.253
• Audiocodes Mediant 800C-Msbr Firmware: from f7.20a through f7.20a.253
• Audiocodes Mediant M800B-Msbr Firmware: from f7.20a through f7.20a.253

References

• https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
• https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf

Get alerted when CVE-2019-9230 or the next vulnerability affects your stack