Back to Database
Status published
High
CVE-2019-20026
The WebPro interface in NEC SV9100 software releases 7.0 or...
Vulnerability Description
The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-20026
Credits & Attribution
No credits recorded in the NVD database.
References
More from nec
View All →CVE-2021-44746
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0...
Medium
5.3
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices,...
Critical
9.8
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped...
Medium
6.5
CVE-2019-20031
NEC UM8000, UM4730 and prior non-InMail voicemail systems with all...
Critical
9.1
CVE-2019-20030
An attacker with knowledge of the modem access number on...
High
7.8
Affected Vendor
Affected Software
sv9100 firmware
Vulnerable Versions:
7.0
Timeline
Official Publish:
July 29th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.