Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
MICI Network Co. Ltd. records in CISA KEVNo MICI Network Co. Ltd. vulnerabilities are listed in CISA KEV.
Priority HIGH 77
An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00635 · Published 2025-05-29 · Fixed in 3.0.1.0 CWE-201
Priority HIGH 76
An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.
CVSS 4.0CRITICAL 9.4· Network · High privileges · No interaction · EPSS 0.1717 · Published 2025-05-29 · Fixed in 3.0.1.0 CWE-78
Priority MEDIUM 57
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00532 · Published 2025-05-29 · Fixed in 3.0.1.0 CWE-256
