CVE-2022-36780

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system: ip:port//V=2;ChannellD=number;Ext=number;Command=startLM;Client=number;Request=number;R=number number - id of the recorded number.
References
Link Resource
https://www.gov.il/en/Departments/faq/cve_advisories Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:avdorcis:crystal_quality:-:*:*:*:*:*:*:*

Information

Published : 2022-09-13 03:15

Updated : 2022-09-16 02:34


NVD link : CVE-2022-36780

Mitre link : CVE-2022-36780

Products Affected
No products.
CWE