Vulnerabilities

TI-2023-16676 CVE-2023-33760 · GHSA-xr44-2pv4-gw8r

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL…

MEDIUM 57

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00276 Published 2024-01-25 No fix listed CWE-295

TI-2023-16675 CVE-2023-33759 · GHSA-q9p8-42p3-gq3h

SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication…

HIGH 82

SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2024-01-25 No fix listed CWE-307

TI-2023-16674 CVE-2023-33758 · GHSA-2g55-8535-gp6f

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site…

MEDIUM 60

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-01-25 No fix listed CWE-79

Vulnerabilities

Filters

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL…

SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication…

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site…