# CVE-2025-34335: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated…

Source: https://junglewise.ai/threats/cve-2025-34335-audiocodes-fax-server-and-auto-attendant-ivr-appliances-versions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-19  
License: CC BY 4.0 with a link back

CVE-2025-34335 · Severity: high · CVSS 8.8 · Published 2025-11-19

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodes_files/ActivateLicense.php. When a license file is uploaded, the application derives a new filename by combining a generated base name with the attacker-controlled extension portion of the original upload name, then constructs a command line for fax_server_lic_cmdline.exe that includes this path. The extension value is incorporated into the command string without input validation, escaping, or proper argument quotation before being passed to exec(). An authenticated user with access to the license upload interface can supply a specially crafted filename whose extension injects additional shell metacharacters, causing arbitrary commands to be executed as NT AUTHORITY\\SYSTEM.

Technologies: [Audiocodes Fax Server](https://junglewise.ai/threats/technologies/fax-server), [Audiocodes Interactive Voice Response](https://junglewise.ai/threats/technologies/interactive-voice-response). Vendors: [Audiocodes](https://junglewise.ai/threats/vendors/audiocodes).

## Quick answers

**Is CVE-2025-34335 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-34335 being exploited in the wild.

**How severe is CVE-2025-34335?** High severity, with a CVSS score of 8.8, published 19 November 2025.

**Which products and versions are affected?** Audiocodes Fax Server, Audiocodes Interactive Voice Response. The advisory does not name versions.

**Is there a fix for CVE-2025-34335?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-34335?** Check whether you run Audiocodes Fax Server or Audiocodes Interactive Voice Response. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Audiocodes Fax Server
- Audiocodes Interactive Voice Response

## Related threats

- [AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an…](https://junglewise.ai/threats/cve-2025-34334-audiocodes-fax-server-and-auto-attendant-ivr-appliances-versions)
- [AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document…](https://junglewise.ai/threats/cve-2025-34333-audiocodes-fax-server-and-auto-attendant-ivr-appliances-versions)
- [AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web…](https://junglewise.ai/threats/cve-2025-34332-audiocodes-fax-server-and-auto-attendant-ivr-appliances-versions)
- [AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated…](https://junglewise.ai/threats/cve-2025-34331-audiocodes-fax-server-and-auto-attendant-ivr-appliances-versions)
- [AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web…](https://junglewise.ai/threats/cve-2025-34330-audiocodes-fax-server-and-auto-attendant-ivr-appliances-versions)