CVE-2019-20025

Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privileg...

CVE-2019-20025

NEC SV9100 PBX is affected (software release 6.0 and later). The root cause is an undocumented user account with manufacturer privileges, enabling an unauthenticated, remote attacker to log in using a hardcoded username/password. Impact per sources: attacker could remotely log in with manufacture...