Sl2100 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SF

Product

Sl2100 Firmware

by Nec · last CVE Jul 29, 2020

4

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 1High 2Medium 1Low 0

Severity

All severities4 Critical1 High2 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Sl2100 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-20027	9.8	1%	Jul 29	Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank… Affected: 7.0 and later
CVE-2019-20029	8.8	2%	Jul 29	An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100… Affected: All versions, or not specified
CVE-2019-20028	7.5	1%	Jul 29	Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails,… Affected: All versions, or not specified
CVE-2019-20032	6.5	1%	Jul 29	An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and… Affected: All versions, or not specified