high7.5
CVE-2019-20028
Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access …
Impact
Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Sv8100 Firmware | All versions |
| Nec | Sv9100 Firmware | All versions |
| Nec | Sl1100 Firmware | All versions |
| Nec | Sl2100 Firmware | All versions |