CVE-2025-52881: 
Docker vulnerability analysis and mitigation

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before version 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file (NVD).

The vulnerability stems from the implementation of a hard-coded cryptographic key in the system. This represents a critical security weakness classified under CWE-321 (Use of Hard-coded Cryptographic Key). The vulnerability has received a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, and needs no privileges or user interaction to exploit (CISA-ADP).

The primary impact of this vulnerability is the potential exposure of sensitive information. An attacker can leverage the hard-coded key to decrypt sensitive data, particularly passwords, that are stored in the topology file. This could lead to unauthorized access to system resources and compromise of system security (NVD).

The vendor has addressed this vulnerability in version 8.4.582 of AudioCodes One Voice Operations Center (OVOC). Users are strongly advised to upgrade to this version or later to mitigate the risk (NVD).