CVE-2023-33760

2024-01-2500:00:00

mitre

github.com

cve-2023-33760

default ssl certificate

splicecom maximiser soft pbx

man-in-the-middle attack

AI Score

7.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.

References

github.com/twignet/splicecom