← Back to browse · API

CVE-2022-24627

Severity
CRITICAL
CVSS
9.8
EPSS
0.26389
Risk score
48.44
CISA KEV
No
PoC
No
Published
2023-05-29
Modified
2025-01-14
First seen
2026-08-07
Aliases
EUVD-2022-29503, GHSA-V6Q9-3Q27-XXG6
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-29503

Description

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.

References