cbcvebase.

Gigasetpro Maxwell Basic Firmware vulnerabilities

1 known vulnerability affecting gigasetpro/maxwell_basic_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-18871P2CRITICALCVSS 9.8v2.22.72018-12-20
CVE-2018-18871 [CRITICAL] CWE-640 CVE-2018-18871: Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmwar Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).
nvd
Gigasetpro Maxwell Basic Firmware vulnerabilities | cvebase