Splicecom - vulnerabilities (CVEs)

4 CVEs in 3 products, 0 in the last 30 days, newest from 2024-01-25.

Products

• Maximiser Soft Pbx - 3 CVEs
• Ipcs - 1 CVEs
• Ipcs2 - 1 CVEs

Newest CVEs of Splicecom

• CVE-2023-33757 - CVSS 5.9 (medium), 2024-01-25: A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows…
• CVE-2023-33760 - CVSS 5.3 (medium), 2024-01-25: SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on…
• CVE-2023-33759 - CVSS 9.8 (critical), 2024-01-25: SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute…
• CVE-2023-33758 - CVSS 6.1 (medium), 2024-01-25: Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields…