CVE-2025-34331: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated…
CVE-2025-34331 · Severity: high · CVSS 7.5 · Published 2025-11-19
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script. The endpoint exposes a file download mechanism that lacks access control, allowing remote, unauthenticated users to request files stored on the appliance based solely on attacker-supplied path and filename parameters. While limited to specific file extensions permitted by the application logic, sensitive backup archives can be retrieved, exposing internal databases and credential hashes. Successful exploitation may lead to disclosure of administrative password hashes and other sensitive configuration data.
No. Junglewise Threat Intelligence has no report of CVE-2025-34331 being exploited in the wild.
How severe is CVE-2025-34331?
High severity, with a CVSS score of 7.5, published 19 November 2025.
Which products and versions are affected?
Audiocodes Fax Server, Audiocodes Interactive Voice Response. The advisory does not name versions.
Is there a fix for CVE-2025-34331?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-34331?
Check whether you run Audiocodes Fax Server or Audiocodes Interactive Voice Response. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.