AudioCodes Fax Server and Auto-Attendant IVR Unauthenticated File Read Vulnerability

A file read vulnerability has been identified in AudioCodes Fax Server and Auto-Attendant IVR appliances, affecting versions through 2.6.23. The vulnerability arises from the download.php script, which lacks proper access controls, allowing remote, unauthenticated users to read files from the appliance by specifying file paths and names. Although the vulnerability is restricted to certain file extensions, it can be exploited to access sensitive backup archives that contain internal databases and credential hashes. This exploitation could lead to the disclosure of administrative password hashes and other confidential configuration information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files, including administrative password hashes and critical configuration data.