© 2026 vulntracker.io

CVE-2019-9231

N/A

Published: July 18, 2019 at 03:22 PM UTC

Updated: June 17, 2026 at 02:43 AM UTC

8 products affected across 1 vendorMediant 500-mbsr FirmwareMediant 800C Msbr FirmwareMediant M800B Msbr Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.7%

Description

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions, because CSRFProtection=1 is not a default and is not documented.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Mediant 500-mbsr Firmware · Audiocodes

95%

f7.20a ≤ v < f7.20a.202.307

Affected range stops below f7.20a.202.307, so it looks safe — our inference, not a vendor statement

audiocodes-mediant-500-mbsr (same device)

Mediant 500L Msbr Firmware · Audiocodes

95%

f7.20a ≤ v < f7.20a.202.307

Affected range stops below f7.20a.202.307, so it looks safe — our inference, not a vendor statement

audiocodes-mediant-500l-msbr (same device)

Mediant 800C Msbr Firmware · Audiocodes

95%

f7.20a ≤ v < f7.20a.202.307

Affected range stops below f7.20a.202.307, so it looks safe — our inference, not a vendor statement

audiocodes-mediant-800c-msbr (same device)

Mediant M800B Msbr Firmware · Audiocodes

95%

f7.20a ≤ v < f7.20a.202.307

Affected range stops below f7.20a.202.307, so it looks safe — our inference, not a vendor statement

audiocodes-mediant-m800b-msbr (same device)

Mediant 500-Mbsr · Audiocodesdevice

80%

All versions

Mediant 500L-Msbr · Audiocodesdevice

80%

All versions

Mediant 800C-Msbr · Audiocodesdevice

80%

All versions

Mediant M800B-Msbr · Audiocodesdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCThird Party Advisory

Source: [email protected]

https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf

CVSS

6.8MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-352

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card