Authenticated Command Injection in AudioCodes Fax Server and Auto-Attendant IVR Appliances

CVE-2025-34334

What is CVE-2025-34334?

The AudioCodes Fax Server and Auto-Attendant IVR appliances are susceptible to an authenticated command injection vulnerability through the fax test functionality. When an authenticated user initiates a 'send' fax test, the system constructs a command line that includes parameters supplied by the user, passing it to a backend process without adequate validation or sanitization. This flaw allows attackers with access to the fax test interface to inject arbitrary shell commands that may be executed with NT AUTHORITY\SYSTEM privileges. Additionally, the generated batch files are stored in a directory with insufficient security controls, permitting local low-privilege users to alter pending batch files to escalate their own privileges.

References