Splicecom

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Splicecom records in CISA KEV

No Splicecom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maximiser Soft Pbx 3 records HIGH Ipcs 1 record LOW Ipcs2 1 record LOW

Records

3 records in Maximiser Soft Pbx · all components

TI-2023-16675 CVE-2023-33759 · GHSA-q9p8-42p3-gq3h

SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication…

HIGH 82

SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2024-01-25 No fix listed CWE-307

TI-2023-16674 CVE-2023-33758 · GHSA-2g55-8535-gp6f

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site…

MEDIUM 60

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-01-25 No fix listed CWE-79

TI-2023-16676 CVE-2023-33760 · GHSA-xr44-2pv4-gw8r

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL…

MEDIUM 57

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00276 Published 2024-01-25 No fix listed CWE-295

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0