PT-2026-1808

Name of the Vulnerable Software and Affected Versions ABB WebPro SNMP Card PowerValue versions through 1.1.8.K ABB WebPro SNMP Card PowerValue UL versions through 1.1.8.K Description An improper check for unusual or exceptional conditions exists in ABB WebPro SNMP Card PowerValue and ABB WebPro...

ABB WebPro SNMP Card PowerValue and ABB WebPro SNMP Card PowerValue: UL security vulnerabilities

ABB WebPro SNMP Card PowerValue and ABB WebPro SNMP Card PowerValue UL are both a remote web management system from ABB Switzerland. A security vulnerability exists in ABB WebPro SNMP Card PowerValue and ABB WebPro SNMP Card PowerValue UL 1.1.8.K and earlier versions, which stems from an incorrec...

EUVD-2019-10585

Malware in sbrugna...

EUVD-2019-10584

Malware in sbrugna...

EUVD-2019-10582

Malware in sbrugna...

CVE-2019-20028

Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface...

CVE-2019-20026

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request...

CVE-2019-20028

Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface...

CVE-2019-20029

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged account, including a...

CVE-2019-20026

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request...

Design/Logic Flaw

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request...

CVE-2019-20029

CVE-2019-20029 describes an exploitable privilege-escalation in the WebPro functionality of Aspire-derived NEC PBXes, affecting all versions of SV8100, SV9100, SL1100 and SL2100. A specially crafted HTTP POST can elevate privileges to a higher privileged account, including an undocumented develop...

CVE-2019-20028

CVE-2019-20028 affects NEC PBXes running InMail (all SV8100/SV9100/SL1100/SL2100 variants) where the WebPro administration interface allows unauthenticated read-only access to voicemails, greetings, and voice response system content. The root cause is an unauthenticated exposure via WebPro; impac...

CVE-2019-20026

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request...

CVE-2019-20026

CVE-2019-20026 describes a vulnerability in the WebPro interface of NEC SV9100 software releases 7.0 and above, where unauthenticated remote attackers can reset all existing usernames and passwords to default values via a crafted request. The Red Hat entry corroborates this issue. The available d...

PT-2020-10322

Name of the Vulnerable Software and Affected Versions Aspire-derived NEC PBXes versions affected versions not specified SV8100 versions affected versions not specified SV9100 versions affected versions not specified SL1100 versions affected versions not specified SL2100 versions affected versions...

PT-2020-10321

Name of the Vulnerable Software and Affected Versions NEC PBXes versions SV8100, SV9100, SL1100, and SL2100 Description The issue allows unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface. Recommendations...

CVE-2019-20026: Undefined Security Weakness

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request...

PT-2020-10319

Name of the Vulnerable Software and Affected Versions NEC SV9100 versions 7.0 and higher Description The issue allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request to the WebPro interface. Recommendations For versions 7.0 an...

CVE-2019-20028: Undefined Security Weakness

Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface...