CVE-2019-20032

Name of the Vulnerable Software and Affected Versions NEC PBXes versions of SV8100, SV9100, SL1100, and SL2100

Description An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes may access the system's administration modem.

Recommendations For all versions of SV8100, SV9100, SL1100, and SL2100 devices, consider restricting access to the InMail voicemail box and the find me/follow me feature until a patch is available. As a temporary workaround, consider disabling the find me/follow me feature on the affected devices to minimize the risk of exploitation.