MICI Network NetFax Server Information Disclosure

The vulnerability of the product suite for facilitating the reception of fax messages related to MICI Network NetFax Server lies in the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access ...

CVE-2025-48046 MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint...

CVE-2025-48045 MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure

An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials...

PT-2025-23150

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the "/config.php" endpoint. Recommendations At the moment, there is no...

PT-2025-23149

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated HTTP GET request to the "/client.php" endpoint will disclose the default administrator user credentials. Recommendations At the moment, there is no information about a newer...