CVE-2024-52884

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-07 · updated 2026-06-17
Weakness: CWE-327

Description

An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501.841. Due to the use of weak password obfuscation/encryption, an attacker with access to configuration exports (INI) is able to decrypt the passwords.

Affected products

Audiocodes Mediant Session Border Controller: before 7.40a.501.841 — fixed in 7.40a.501.841

How to fix

Upgrade to a fixed version: Audiocodes Mediant Session Border Controller 7.40a.501.841. Check the vendor advisory for mitigations.

References

https://www.audiocodes.com/solutions-products/products/session-border-controllers-sbcs
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-078.txt

Get alerted when CVE-2024-52884 or the next vulnerability affects your stack