Lucene search
HistoryJan 25, 2024 - 8:15 a.m.
CVE-2023-33760
splicecom
maximiser soft pbx
ssl certificate
man-in-the-middle attack
cve-2023-33760
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
24.2%
SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.
Affected configurations
Node
splicecommaximiser_soft_pbxRange≤1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| splicecom | maximiser_soft_pbx | * | cpe:2.3:a:splicecom:maximiser_soft_pbx:*:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2023-33760
2024-01-25 08:15:08
vulnrichment
vulnrichment
CVE-2023-33760
2024-01-25 00:00:00
prion
prion
Design/Logic Flaw
2024-01-25 08:15:00
cvelist
cvelist
CVE-2023-33760
2024-01-25 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
24.2%
Related for NVD:CVE-2023-33760