critical9.8
CVE-2019-20027
Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configure…
Impact
Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Sv8100 Firmware | from 7.0 |
| Nec | Sv9100 Firmware | from 7.0 |
| Nec | Sl1100 Firmware | from 7.0 |
| Nec | Sl2100 Firmware | from 7.0 |