CVE-2023-22286

🗓️ 17 Jan 2023 00:00:00Reported by jpcertType

CSRF vulnerability in MAHO-PBX prior to version 1.11.00 allows attacker user hijacking.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-22286	17 Jan 202312:24	–	circl
CNNVD	MAHO-PBX NetDevancer series 跨站请求伪造漏洞	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-22286	17 Jan 202300:00	–	cvelist
EUVD	EUVD-2023-26450	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#99957889: Multiple vulnerabilities in MAHO-PBX NetDevancer series	11 Jan 202300:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in MAHO-PBX NetDevancer series	11 Jan 202307:11	–	jvn
NVD	CVE-2023-22286	17 Jan 202310:15	–	nvd
Prion	Cross site request forgery (csrf)	17 Jan 202310:15	–	prion
Positive Technologies	PT-2023-18398 · Maho Pbx · Maho-Pbx Netdevancer Vsg Lite/Uni +2	17 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-22286	23 May 202505:53	–	redhatcve

NVD

Vulners

Node

ate-mahoroba maho-pbx_netdevancer_firmwareRange<1.11.00lite

AND

ate-mahoroba maho-pbx_netdevancerMatch-lite

Node

ate-mahoroba maho-pbx_netdevancer_vsg_firmwareRange<1.11.00lite

AND

ate-mahoroba maho-pbx_netdevancer_vsgMatch-lite

Node

ate-mahoroba maho-pbx_netdevancer_mobilegate_firmwareRange<1.11.00home

AND

ate-mahoroba maho-pbx_netdevancer_mobilegateMatch-home

Node

ate-mahoroba maho-pbx_netdevancer_firmwareRange<1.11.00uni

AND

ate-mahoroba maho-pbx_netdevancerMatch-uni

Node

ate-mahoroba maho-pbx_netdevancer_firmwareRange<1.11.00pro

AND

ate-mahoroba maho-pbx_netdevancerMatch-pro

Node

ate-mahoroba maho-pbx_netdevancer_firmwareRange<1.11.00cloud

AND

ate-mahoroba maho-pbx_netdevancerMatch-cloud

Node

ate-mahoroba maho-pbx_netdevancer_vsg_firmwareRange<1.11.00uni

AND

ate-mahoroba maho-pbx_netdevancer_vsgMatch-uni

Node

ate-mahoroba maho-pbx_netdevancer_mobilegate_firmwareRange<1.11.00office

AND

ate-mahoroba maho-pbx_netdevancer_mobilegateMatch-office

[
  {
    "vendor": "Mahoroba Kobo, Inc.",
    "product": "MAHO-PBX NetDevancer series",
    "versions": [
      {
        "version": "MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN99957889/index.html
ate-mahoroba	www.ate-mahoroba.jp/netdevancer/manual/

04 Apr 2025 18:15Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.1

EPSS0.00158

SSVC

CWE-352