Unauthenticated File Upload Vulnerability in AudioCodes Fax Server and Auto-Attendant IVR Appliances
CVE-2025-34328

9.3CRITICAL

Key Information:

Vendor

Audiocodes Limited

Status
Audiocodes Fax/ivr Appliance
Vendor
CVE Published:
19 November 2025

What is CVE-2025-34328?

The AudioCodes Fax Server and Auto-Attendant IVR appliances possess a critical vulnerability due to an insecure web administration component (F2MAdmin). This flaw enables remote, unauthenticated attackers to exploit a script-management endpoint, allowing them to write arbitrary files to the server's file structure. The saveScript action directly accepts attacker-supplied data and saves it under the privileges of the web service account, which operates with elevated rights on Windows systems. Consequently, attackers can not only inject files but also execute them, potentially leading to severe security breaches.

Affected Version(s)

AudioCodes Fax/IVR Appliance 0 <= 2.6.23

References

https://www.audiocodes.com/media/g1in2u2o/0548-product-no...
vendor-advisorypatchmitigation
https://pierrekim.github.io/blog/2025-11-20-audiocodes-fa...
technical-descriptionexploit
https://pierrekim.github.io/advisories/2025-audiocodes-fa...
technical-descriptionexploit

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pierre Barre
JSON
.
CVE-2025-34328 : Unauthenticated File Upload Vulnerability in AudioCodes Fax Server and Auto-Attendant IVR Appliances