PT-2020-10320
CVE-2019-20027
·
تاريخ النشر
2020-07-29
·
تاريخ التحديث
2020-08-04
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NEC PBXes versions 7.0 and higher
Description
The issue concerns NEC PBXes, including the SV8100, SV9100, SL1100, and SL2100, where if incorrectly configured, a blank
username and password combination can be entered as a valid account, successfully authenticating.Recommendations
For versions 7.0 and higher, ensure proper configuration to prevent the acceptance of blank username and password combinations as valid authentication credentials.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾