Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before…
Priority LOW 17CWE-264Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.
Why it matters now
EPSS 0.00798 56th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:snom:voip_phone_firmware:8.0.11:beta:*:*:*:*:*:* | 8.0.11 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.0.12:beta:*:*:*:*:*:* | 8.0.12 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.0.13:beta:*:*:*:*:*:* | 8.0.13 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.1.1:beta:*:*:*:*:*:* | 8.1.1 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.1.2:beta:*:*:*:*:*:* | 8.1.2 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.1.3:*:*:*:*:*:*:* | 8.1.3 | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.1:*:*:*:*:*:*:* | 8.2.1 | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.2:beta:*:*:*:*:*:* | 8.2.2 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.3:beta:*:*:*:*:*:* | 8.2.3 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.4:beta:*:*:*:*:*:* | 8.2.4 beta | Vulnerable | Snom |
- cpe:2.3:a:snom:voip_phone_firmware:8.0.11:beta:*:*:*:*:*:* Versions 8.0.11 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.0.12:beta:*:*:*:*:*:* Versions 8.0.12 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.0.13:beta:*:*:*:*:*:* Versions 8.0.13 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.1.1:beta:*:*:*:*:*:* Versions 8.1.1 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.1.2:beta:*:*:*:*:*:* Versions 8.1.2 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.1.3:*:*:*:*:*:*:* Versions 8.1.3 Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.2:beta:*:*:*:*:*:* Versions 8.2.2 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.3:beta:*:*:*:*:*:* Versions 8.2.3 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.4:beta:*:*:*:*:*:* Versions 8.2.4 beta Vulnerable ·Snom
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:snom:voip_phone_firmware:8.2.5:beta:*:*:*:*:*:* | 8.2.5 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.6:beta:*:*:*:*:*:* | 8.2.6 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.7:beta:*:*:*:*:*:* | 8.2.7 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.8:beta:*:*:*:*:*:* | 8.2.8 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.9:beta:*:*:*:*:*:* | 8.2.9 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.10:beta:*:*:*:*:*:* | 8.2.10 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.11:beta:*:*:*:*:*:* | 8.2.11 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.16:beta:*:*:*:*:*:* | 8.2.16 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.17:beta:*:*:*:*:*:* | 8.2.17 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.18:beta:*:*:*:*:*:* | 8.2.18 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.19:beta:*:*:*:*:*:* | 8.2.19 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.20:beta:*:*:*:*:*:* | 8.2.20 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.21:beta:*:*:*:*:*:* | 8.2.21 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.22:beta:*:*:*:*:*:* | 8.2.22 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.23:beta:*:*:*:*:*:* | 8.2.23 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.24:beta:*:*:*:*:*:* | 8.2.24 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.25:beta:*:*:*:*:*:* | 8.2.25 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.26:beta:*:*:*:*:*:* | 8.2.26 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.27:beta:*:*:*:*:*:* | 8.2.27 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.28:beta:*:*:*:*:*:* | 8.2.28 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.29:beta:*:*:*:*:*:* | 8.2.29 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.30:beta:*:*:*:*:*:* | 8.2.30 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.31:beta:*:*:*:*:*:* | 8.2.31 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.32:beta:*:*:*:*:*:* | 8.2.32 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.33:beta:*:*:*:*:*:* | 8.2.33 beta | Vulnerable | Snom |
| cpe:2.3:a:snom:voip_phone_firmware:8.2.34:beta:*:*:*:*:*:* | 8.2.34 beta | Vulnerable | Snom |
- cpe:2.3:a:snom:voip_phone_firmware:8.2.5:beta:*:*:*:*:*:* Versions 8.2.5 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.6:beta:*:*:*:*:*:* Versions 8.2.6 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.7:beta:*:*:*:*:*:* Versions 8.2.7 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.8:beta:*:*:*:*:*:* Versions 8.2.8 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.9:beta:*:*:*:*:*:* Versions 8.2.9 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.10:beta:*:*:*:*:*:* Versions 8.2.10 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.11:beta:*:*:*:*:*:* Versions 8.2.11 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.16:beta:*:*:*:*:*:* Versions 8.2.16 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.17:beta:*:*:*:*:*:* Versions 8.2.17 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.18:beta:*:*:*:*:*:* Versions 8.2.18 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.19:beta:*:*:*:*:*:* Versions 8.2.19 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.20:beta:*:*:*:*:*:* Versions 8.2.20 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.21:beta:*:*:*:*:*:* Versions 8.2.21 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.22:beta:*:*:*:*:*:* Versions 8.2.22 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.23:beta:*:*:*:*:*:* Versions 8.2.23 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.24:beta:*:*:*:*:*:* Versions 8.2.24 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.25:beta:*:*:*:*:*:* Versions 8.2.25 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.26:beta:*:*:*:*:*:* Versions 8.2.26 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.27:beta:*:*:*:*:*:* Versions 8.2.27 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.28:beta:*:*:*:*:*:* Versions 8.2.28 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.29:beta:*:*:*:*:*:* Versions 8.2.29 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.30:beta:*:*:*:*:*:* Versions 8.2.30 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.31:beta:*:*:*:*:*:* Versions 8.2.31 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.32:beta:*:*:*:*:*:* Versions 8.2.32 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.33:beta:*:*:*:*:*:* Versions 8.2.33 beta Vulnerable ·Snom
- cpe:2.3:a:snom:voip_phone_firmware:8.2.34:beta:*:*:*:*:*:* Versions 8.2.34 beta Vulnerable ·Snom
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-2291
- 2026-10-03 Alias added: GHSA-wvm8-ghrc-v96m
References
Sources
- CVE-2010-2291 · CVE Program
- CVE-2010-2291 · NVD
- FIRST EPSS
- GHSA-wvm8-ghrc-v96m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences