Comelit Group S.p.A. vulnerabilities
We track 2 vulnerabilities in Comelit Group S.p.A. products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Comelit Group S.p.A. vulnerabilities
- 7.5 High severity
1456B Multi-User Gateway: Missing Authentication for Critical Functionality
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote
- 8.8 High severity
1456B Multi-User Gateway: Direct Request
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer