Lucene search
HistoryJan 25, 2024 - 8:15 a.m.
CVE-2023-33759
splicecom maximiser soft pbx
authentication bypass
brute force
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.001
Percentile
43.4%
SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.
Affected configurations
Node
splicecommaximiser_soft_pbxRange≤1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| splicecom | maximiser_soft_pbx | * | cpe:2.3:a:splicecom:maximiser_soft_pbx:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2023-33759
2024-01-25 00:00:00
cve
cve
CVE-2023-33759
2024-01-25 08:15:08
prion
prion
Authentication flaw
2024-01-25 08:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.001
Percentile
43.4%
Related for NVD:CVE-2023-33759