Slican vulnerabilities
We track 7 vulnerabilities in Slican products across 14 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
Latest Slican vulnerabilities
- 8.2 High severity
IPx: Plaintext Storage of a Password
WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.
- 8.7 High severity
IPx: Improper Neutralization of Special Elements used in an SQL Command
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6
- 8.2 High severity
IPx: Inadequate Encryption Strength
Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The i
- 9.3 Critical severity
CCT-1668: Authentication Bypass Using an Alternate Path or Channel
In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the servi
- 8.7 High severity
IPx: Use of Weak Credentials
In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtained without authentication. An unauthenticated attacker can deduce the secure key and obtain admin credentials. This issu
- 9.3 Critical severity
IPx: Authentication Bypass Using an Alternate Path or Channel
Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. This issue was fixed in versions below: - NCP: version 1.24.0250 - IPx series: vers
- 9.8 Critical severity
NCP: Missing Authentication for Critical Functionality
Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote attacker is able to execute arbitrary PHP commands by sending specially crafted requests to /webcti/session_ajax.php endpoint. This issue was fixed in version 1.