CVE-2024-48197

MediumCVSS 4.7

Published: 02/01/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

33th percentile - higher than 33% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in Audiocodes MP-202b version 4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface.

Risk Assessment

An attacker can hijack an administrator session or steal credentials, leading to full device compromise and potential access to the internal network.

Recommendation

Immediately update the device firmware to the latest version and apply input filtering on the login page.

Original NVD description (English source)

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface.