CVE-2019-20033

Name of the Vulnerable Software and Affected Versions NEC SV8100 devices (all versions)

Description A set of documented, static login credentials may be used to access the DIM interface on Aspire-derived NEC PBXes, including all versions of SV8100 devices.

Recommendations For all versions of NEC SV8100 devices, consider changing the default login credentials to prevent unauthorized access to the DIM interface. As a temporary workaround, restrict access to the DIM interface until a more secure authentication method is implemented.