This vulnerability (CVE-2024-48197) affects Audiocodes MP-202b version 4.4.3 and is classified as a Cross Site Scripting (CWE-79) issue. It enables a remote attacker to escalate privileges by exploiting the login page of the web interface. The CVSS 3.1 base score is 4.7, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, scope changed, no confidentiality impact, limited integrity impact, and no availability impact. There is no information about available patches or vendor advisories, and no known exploits in the wild have been reported.

An attacker can exploit this XSS vulnerability remotely via the login page to escalate privileges, potentially allowing limited integrity impact on the affected system. There is no impact on confidentiality or availability according to the CVSS vector. The attack requires user interaction and can affect the security scope of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when accessing the login page and consider limiting access to trusted networks. Monitor vendor communications for updates on patches or mitigations.