EUVD-2018-10582

Malware in sbrugna...

Default credentials

Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker in the same network as the device to change the admin password without authentication and without knowing the original password...

CVE-2018-18871: Weak Password Recovery Mechanism for Forgotten Password

Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker in the same network as the device to change the admin password without authentication and without knowing the original password...

PT-2018-14705

Name of the Vulnerable Software and Affected Versions Gigaset Maxwell Basic VoIP phones version 2.22.7 Description The issue concerns a missing password verification in the web interface, allowing a remote attacker in the same network as the device to change the admin password without...