Vulnerability · Published Mar 13, 2023 · Assigned by icscert
CVE-2023-0351CVE-2023-0351
High 8.8
In plain English
A high-severity security flaw in E11 from Akuvox. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.3%top 28.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.