1456B Multi-User Gateway vulnerabilities
2 known vulnerabilities in 1456B Multi-User Gateway from Comelit Group S.p.A.. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest first
- 7.5 High severity
1456B Multi-User Gateway: Missing Authentication for Critical Functionality
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote
- 8.8 High severity
1456B Multi-User Gateway: Direct Request
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer