CVE-2019-20031

Name of the Vulnerable Software and Affected Versions NEC UM8000 versions all known software versions NEC UM4730 versions all known software versions NEC non-InMail voicemail systems versions all known software versions

Description The issue allows for an infinite number of login attempts in the telephone user interface, effectively enabling brute force attacks.

Recommendations For NEC UM8000, consider restricting access to the telephone user interface until a fix is available. For NEC UM4730, consider restricting access to the telephone user interface until a fix is available. For NEC non-InMail voicemail systems, consider restricting access to the telephone user interface until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.