Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SITEL Clear all filters
TI-2021-12137 CVE-2021-32456 · GHSA-4gw2-2xw7-86xj

SITEL CAP/PRX cleartext transmission of sensitive information

Priority LOW 28

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00266 Published 2021-05-17 No fix listed CWE-319
TI-2021-12135 CVE-2021-32454 · GHSA-7jp2-r62f-6m58

SITEL CAP/PRX hardcoded credentials

Priority MEDIUM 41

SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00395 Published 2021-05-17 No fix listed CWE-798
TI-2021-12134 CVE-2021-32453 · GHSA-6qg9-wx75-qw25

SITEL CAP/PRX information exposure

Priority LOW 28

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network, to access via HTTP to the internal configuration database of the device without any authentication.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00246 Published 2021-05-17 No fix listed CWE-306
TI-2021-12136 CVE-2021-32455 · GHSA-vq4h-gf44-5hcq

SITEL CAP/PRX vulnerable to a denial of service attack

Priority LOW 30

SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device.

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.00357 Published 2021-05-17 No fix listed CWE-400