50 matches found
Innovaphone PBX Security Breach
Innovaphone PBX is an advanced and modern IP phone system from Innovaphone. A security vulnerability exists in Innovaphone PBX versions prior to 14r1, which stems from a vulnerability that allows an attacker to enumerate discrepant information in a response...
CVE-2024-24720
The Innovaphone PBX IP phone system is vulnerable in versions prior to 14r1 due to an issue in the Forgot password function. This flaw allows an attacker to enumerate user accounts by observing how the system provides different responses to incoming requests, thereby revealing whether a specific ...
CVE-2024-24720
An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system...
Innovaphone PBX Security Breach
Innovaphone PBX is an advanced and modern IP phone system from Innovaphone. A security vulnerability exists in Innovaphone PBX versions prior to 14r1, which stems from the vulnerability of passwords used for authentication to brute force attacks...
CVE-2024-24721
An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack through which an attacker may be able to access the administration panel...
CVE-2024-24721
An issue was discovered in Innovaphone PBX devices running versions prior to 14r1 . The vulnerability exists in the password form used for authentication, which is susceptible to a Brute Force Attack . Successful exploitation allows an attacker to gain unauthorized access to the administration pa...
CVE-2024-24721
An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack through which an attacker may be able to access the administration panel...
CVE-2022-41870
AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...
CVE-2022-41870
AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...
Command injection
AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...
CVE-2022-41870
AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...
CVE-2022-41870
Affected software: Innovaphone AP Manager (pre-13r2 Service Release 17). Vulnerability: Command injection via a modified service ID during app upload, enabling an attacker to inject commands with high impact likely affecting confidentiality, integrity, and availability as indicated by CVSS v3.1 m...
CVE-2022-41870
AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...
PT-2022-26105 · Innovaphone · Innovaphone
Name of the Vulnerable Software and Affected Versions: Innovaphone versions prior to 13r2 Service Release 17 Description: The issue allows command injection via a modified service ID during app upload. Recommendations: For versions prior to 13r2 Service Release 17, update to 13r2 Service Release ...
innovaphone AG 命令注入漏洞
innovaphone AG is a specialist in providing personalized and complex business communication solutions in the field of IP telephony from innovaphone AG, Germany. A command injection vulnerability exists in versions prior to Innovaphone 13r2 Service Release 17. An attacker could use this...
innovaphone.com XSS vulnerability
Open Bug Bounty ID: OBB-648917 Description| Value ---|--- Affected Website:| innovaphone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
innovaphone.com XSS vulnerability
Open Bug Bounty ID: OBB-570402 Description| Value ---|--- Affected Website:| innovaphone.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
innovaphone IP222 11r2 sr9 Download Denial Of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-017 Product: innovaphone IP222 Manufacturer: innovaphone AG Affected Versions: 11r2 sr9 Tested Versions: 11r2 sr9 Vulnerability Type: Improper Input Validation CWE-20 Risk Level: High Solution Status: Fixed Manufacturer...
innovaphone IP222 11r2 sr9 Brute Force
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-018 Product: innovaphone IP222 Manufacturer: innovaphone AG Affected Versions: 11r2 sr9 Tested Versions: 11r2 sr9 Vulnerability Type: Improper Restriction of Excessive Authentication Attempts CWE-307 Risk Level: Medium Solutio...
innovaphone IP222 UDP Denial Of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-016 Product: innovaphone IP222 Manufacturer: innovaphone AG Affected Versions: 11r2 sr9 Tested Versions: 11r2 sr9 Vulnerability Type: Improper Input Validation CWE-20 Risk Level: High Solution Status: Fixed Manufacturer...