ZeroHour

CVE-2019-20031

CVSS 3.1
9.1 critical
EPSS
<1%p61
Published
()
Modified
Description

NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the telephone user interface (TUI), effectively allowing brute force attacks.

Vendors
nec
Products
um8000 firmware, um4730 firmware
Weakness
CWE-307
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.