The vulnerability of the product suite for facilitating the reception of fax messages, the MICI Network NetFax Server, arises from the disclosure of information during data transmission. This vulnerability allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the product suite for facilitating the reception of fax messages related to MICI Network NetFax Server lies in the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access ...

CVE-2025-48046 MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint...

CVE-2025-48045 MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure

An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials...

PT-2025-23149

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated HTTP GET request to the "/client.php" endpoint will disclose the default administrator user credentials. Recommendations At the moment, there is no information about a newer...

PT-2025-23150

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the "/config.php" endpoint. Recommendations At the moment, there is no...