interactive voice response vulnerabilities and fixes

Recent CVEs affecting interactive voice response, with upgrade or downgrade steps. 8 tracked.

Also searched as: interactivevoiceresponse.

interactive voice response has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-11-19. Highest priority: CVE-2025-34329 (score 64/100).

• CVE-2025-34329 CRITICAL 9.8 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthen
• CVE-2025-34328 CRITICAL 9.8 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web admi
• CVE-2025-34334 HIGH 8.8 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to
• CVE-2025-34335 HIGH 8.8 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenti
• CVE-2025-34331 HIGH 7.5 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthe
• CVE-2025-34330 MEDIUM 5.3 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web admi
• CVE-2025-34332 HIGH 7.8 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web admi
• CVE-2025-34333 HIGH 7.8 UPGRADE UPGRADE AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web

FAQ

How do I fix interactive voice response vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is interactive voice response being exploited right now?

None of the tracked interactive voice response CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which interactive voice response CVE should I patch first?

CVE-2025-34329 currently ranks highest (64/100): AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthen.

RSS feed for interactive voice response · ← Back to latest CVEs