CVE-2023-22956 (405hd_firmware, 445hd_firmware, c435hd_firmware, c450hd_firmware, c455hd_firmware, c470hd_firmware)

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information.

configuration configuration files cryptographic cve decrypt encrypted files hard information issue key phones sensitive information voip