EUVD-2018-6438

Malware in sbrugna...

CVE-2018-14529

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password...

Invoxia NVX220 Trust Management Issues Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. A trust management issue vulnerability exists in Invoxia NVX220. An attacker could exploit the vulnerability to access a customized CLI...

Invoxia NVX220 Information Disclosure Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. An information disclosure vulnerability exists in Invoxia NVX220. The vulnerability stems from an error in the configuration, etc., of a network system or product during operation. An unauthorized attacker could exploit the...

CVE-2018-14529

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password...

Default credentials

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

Default credentials

Invoxia NVX220 devices allow TELNET access as admin with a default password...

CVE-2018-14529

Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes...

CVE-2018-14529

CVE-2018-14529 affects Invoxia NVX220 devices via an escape from a restricted CLI that grants access to /bin/sh, enabling disclosure of password hashes. Multiple connected sources corroborate the core issue, with the root cause described as improper access to a restricted shell leading to sensiti...

CVE-2018-14528

Invoxia NVX220 devices allow TELNET access as admin with a default password...

CVE-2018-14528

CVE-2018-14528 affects Invoxia NVX220 devices, where TELNET access is available as admin using a default password. The connected documents corroborate a trust/CLI-access vulnerability enabling complete control, with high-severity impact (C, I, A = HIGH) per CVSS data in the CVE record. No explici...