Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior
Críticas / altas1277▼ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6.5)0.73%—NEC Sv8100 FirmwareNEC Sv9100 FirmwareNEC Sl1100 FirmwareNEC Sl2100 Firmware29/7/202017/6/2026
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem.
ModificadaAlta (8.8)1.6%—NEC Sv8100 FirmwareNEC Sv9100 FirmwareNEC Sl1100 FirmwareNEC Sl2100 Firmware29/7/202017/6/2026
An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged account, including an undocumented…
ModificadaAlta (7.5)1.1%—NEC Sv8100 FirmwareNEC Sv9100 FirmwareNEC Sl1100 FirmwareNEC Sl2100 Firmware29/7/202017/6/2026
Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface.
ModificadaCrítica (9.8)1.4%—NEC Sv8100 FirmwareNEC Sv9100 FirmwareNEC Sl1100 FirmwareNEC Sl2100 Firmware29/7/202017/6/2026
Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account.