MAHO-PBX NetDevancer series vulnerabilities

3 known vulnerabilities in MAHO-PBX NetDevancer series from Mahoroba Kobo. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  MAHO-PBX NetDevancer series: Cross-Site Request Forgery

  CVE-2023-22286Jan 17, 2023Mahoroba Kobo

  Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauth

• 7.2 High severity

  MAHO-PBX NetDevancer series: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-22280Jan 17, 2023Mahoroba Kobo

  MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote authenticated attacker with an administrative privilege to

• 9.8 Critical severity

  MAHO-PBX NetDevancer series: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-22279Jan 17, 2023Mahoroba KoboEPSS 1.16%

  MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote unauthenticated attacker to execute an arbitrary OS comman