CVE-2019-20028

Name of the Vulnerable Software and Affected Versions NEC PBXes versions SV8100, SV9100, SL1100, and SL2100

Description The issue allows unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface.

Recommendations For NEC PBXes versions SV8100, SV9100, SL1100, and SL2100, restrict access to the WebPro administration interface to minimize the risk of exploitation. As a temporary workaround, consider limiting read-only access to voicemails, greetings, and voice response system content until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.