AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.
https://www.exploit-db.com/exploits/46164/
http://seclists.org/fulldisclosure/2019/Jan/38
http://packetstormsecurity.com/files/151116/AudioCode-400HD-Remote-Command-Injection.html