Vulnerability · Published Sep 13, 2022 · Assigned by INCD
CVE-2022-36780Avdor CIS - crystal quality Credentials Management Errors
Medium 4.9
In plain English
A medium-severity security flaw in crystal quality from Avdor CIS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.5%top 56.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system: ip:port//V=2;ChannellD=number;Ext=number;Command=startLM;Client=number;Request=number;R=number number - id of the recorded number.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Avdor CIS | crystal quality | Update to the latest version – before unspecified |
References
- https://www.gov.il/en/Departments/faq/cve_advisories x_refsource_MISC