Unauthenticated File Read Vulnerability in AudioCodes Fax Server and Auto-Attendant IVR Appliances
CVE-2025-34331

8.7HIGH

Key Information:

Vendor

Audiocodes Limited

Status
Audiocodes Fax/ivr Appliance
Vendor
CVE Published:
19 November 2025

What is CVE-2025-34331?

AudioCodes Fax Server and Auto-Attendant IVR appliances include an unauthenticated file read vulnerability that allows remote users to retrieve files from the appliance without appropriate access controls. Through the download.php script, attackers can exploit this vulnerability by supplying the path and filename parameters to access sensitive files. While the endpoint restricts access based on specific file extensions, it still permits retrieval of critical backup archives, risking exposure of internal databases and administrative password hashes. Proper mitigation is essential to safeguard sensitive configuration data and maintain system integrity.

Affected Version(s)

AudioCodes Fax/IVR Appliance 0 <= 2.6.23

References

https://www.audiocodes.com/media/g1in2u2o/0548-product-no...
vendor-advisorypatchmitigation
https://pierrekim.github.io/blog/2025-11-20-audiocodes-fa...
technical-descriptionexploit
https://pierrekim.github.io/advisories/2025-audiocodes-fa...
technical-descriptionexploit

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pierre Barre
JSON
.
CVE-2025-34331 : Unauthenticated File Read Vulnerability in AudioCodes Fax Server and Auto-Attendant IVR Appliances