Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Mahoroba Kobo, Inc. Component: Maho-pbx Netdevancer Mobilegate Firmware Clear all filters
TI-2023-08561 CVE-2023-22296 · GHSA-22f3-jcv7-7v3j

Cross-site scripting in Mahoroba Kobo, Inc. MAHO-PBX NetDevancer series

Priority LOW 28

Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer M…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00522 Published 2023-01-17 No fix listed CWE-79
TI-2023-08553 CVE-2023-22286 · GHSA-43pr-7gqx-7qmm

Cross-site request forgery in Mahoroba Kobo, Inc. MAHO-PBX NetDevancer series

Priority LOW 37

Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office pri…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00362 Published 2023-01-17 No fix listed CWE-352
TI-2023-08548 CVE-2023-22280 · GHSA-mcm8-gg2j-q8vh

OS command injection in Mahoroba Kobo, Inc. MAHO-PBX NetDevancer series

Priority LOW 36

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote authenticated atta…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2023-01-17 No fix listed CWE-78
TI-2023-08547 CVE-2023-22279 · GHSA-g9c9-v54c-gj4f

OS command injection in Mahoroba Kobo, Inc. MAHO-PBX NetDevancer series

Priority MEDIUM 51

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote unauthenticated at…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01158 Published 2023-01-17 No fix listed CWE-78