EUVD-2018-6438

Malware in sbrugna...

CVE-2018-14529

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password...

Invoxia NVX220 Trust Management Issues Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. A trust management issue vulnerability exists in Invoxia NVX220. An attacker could exploit the vulnerability to access a customized CLI...

Invoxia NVX220 Information Disclosure Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. An information disclosure vulnerability exists in Invoxia NVX220. The vulnerability stems from an error in the configuration, etc., of a network system or product during operation. An unauthorized attacker could exploit the...

CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password...

CVE-2018-14529

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

Default credentials

Invoxia NVX220 devices allow TELNET access as admin with a default password...

Default credentials

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

CVE-2018-14529

CVE-2018-14529 affects Invoxia NVX220 devices via an escape from a restricted CLI that grants access to /bin/sh, enabling disclosure of password hashes. Multiple connected sources corroborate the core issue, with the root cause described as improper access to a restricted shell leading to sensiti...

CVE-2018-14529

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password...

PT-2019-9034

Name of the Vulnerable Software and Affected Versions Invoxia NVX220 affected versions not specified Description The issue allows for TELNET access with a default password for the admin account. Recommendations For Invoxia NVX220, change the default admin password to a strong and unique password ...

PT-2019-9035

Name of the Vulnerable Software and Affected Versions Invoxia NVX220 devices affected versions not specified Description The issue allows access to /bin/sh via escape from a restricted Command Line Interface CLI, leading to disclosure of password hashes. Recommendations At the moment, there is no...

CVE-2018-14528: Use of Hard-coded Credentials

Invoxia NVX220 devices allow TELNET access as admin with a default password...

CVE-2018-14529: Exposure of Sensitive Information to an Unauthorized Actor

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...