Maho Pbx Netdevancer Firmware

4 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-22296 MEDIUM This Month

Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Microsoft Maho Pbx Netdevancer Firmware Maho Pbx Netdevancer Vsg Firmware Maho Pbx Netdevancer Mobilegate Firmware

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2023-22286 HIGH This Week

Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Microsoft CSRF Maho Pbx Netdevancer Firmware Maho Pbx Netdevancer Vsg Firmware Maho Pbx Netdevancer Mobilegate Firmware

NVD

CVSS 3.1

8.1

EPSS

0.4%

CVE-2023-22280 HIGH This Week

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Microsoft Maho Pbx Netdevancer Firmware Maho Pbx Netdevancer Vsg Firmware Maho Pbx Netdevancer Mobilegate Firmware

NVD

CVSS 3.1

7.2

EPSS

1.0%

CVE-2023-22279 CRITICAL Act Now

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Microsoft Maho Pbx Netdevancer Firmware Maho Pbx Netdevancer Vsg Firmware Maho Pbx Netdevancer Mobilegate Firmware

NVD

CVSS 3.1

9.8

EPSS

1.1%

CVE-2023-22296

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Microsoft Maho Pbx Netdevancer Firmware +2

NVD

CVE-2023-22286

EPSS 0% CVSS 8.1

HIGH This Week

Microsoft CSRF Maho Pbx Netdevancer Firmware +2

NVD

CVE-2023-22280

EPSS 1% CVSS 7.2

HIGH This Week

Command Injection Microsoft Maho Pbx Netdevancer Firmware +2

NVD

CVE-2023-22279

EPSS 1% CVSS 9.8

CRITICAL Act Now

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Microsoft Maho Pbx Netdevancer Firmware +2

NVD