CVE-2019-20032

EUVD-2019-10588
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
necsv8100_firmware
*
necsv9100_firmware
*
necsl1100_firmware
*
necsl2100_firmware
*
𝑥
= Vulnerable software versions
References
https://shadytel.su/files/nec_cve.txt
https://shadytel.su/files/nec_cve.txt