CVE-2025-48045

An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.

Score

CVSS 4.0 8.7 High

Status

Deferred - cve@rapid7.com

Published

2025-05-29

Last modified

2025-05-29

Weaknesses

CWE-201

Affected products

• Netfax Server (Mici Network Co. Ltd.)

References

• https://www.rapid7.com/blog/post/2025/05/29/cve-2025-48045-cve-2025-48046-cve-2025-48047-mici-netfax-server-product-vul…