Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sv9100_firmware vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2019-20025
Certain builds of NEC SV9100 software could allow an unauthenticated, remote malicious user to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account wit...
Nec Sv9100 Firmware
7.5
CVSSv3
CVE-2019-20026
The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote malicious users to reset all existing usernames and passwords to default values via a crafted request.
Nec Sv9100 Firmware
9.8
CVSSv3
CVE-2019-20027
Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account.
Nec Sv8100 Firmware
Nec Sv9100 Firmware
Nec Sl1100 Firmware
Nec Sl2100 Firmware
7.5
CVSSv3
CVE-2019-20028
Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface.
Nec Sv8100 Firmware
Nec Sv9100 Firmware
Nec Sl1100 Firmware
Nec Sl2100 Firmware
6.5
CVSSv3
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem.
Nec Sv8100 Firmware
Nec Sv9100 Firmware
Nec Sl1100 Firmware
Nec Sl2100 Firmware
8.8
CVSSv3
CVE-2019-20029
An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged acc...
Nec Sv8100 Firmware
Nec Sv9100 Firmware
Nec Sl1100 Firmware
Nec Sl2100 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040
privilege escalation
CVE-2024-4112
CVE-2024-32872
man-in-the-middle
CVE-2024-32788
bypass
CVE-2024-3400
CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
Vulmon