sl1100_firmware vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account.

Nec Sv8100 Firmware Nec Sv9100 Firmware Nec Sl1100 Firmware Nec Sl2100 Firmware

7.5

CVSSv3

Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface.

Nec Sv8100 Firmware Nec Sv9100 Firmware Nec Sl1100 Firmware Nec Sl2100 Firmware

8.8

CVSSv3

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged acc...

Nec Sv8100 Firmware Nec Sv9100 Firmware Nec Sl1100 Firmware Nec Sl2100 Firmware

6.5

CVSSv3

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem.

Nec Sv8100 Firmware Nec Sv9100 Firmware Nec Sl1100 Firmware Nec Sl2100 Firmware

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook