Back to Database
Status published
High
CVE-2019-20030
An attacker with knowledge of the modem access number on...
Vulnerability Description
An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-20030
Credits & Attribution
No credits recorded in the NVD database.
References
More from nec
View All →CVE-2021-44746
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0...
Medium
5.3
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices,...
Critical
9.8
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped...
Medium
6.5
CVE-2019-20031
NEC UM8000, UM4730 and prior non-InMail voicemail systems with all...
Critical
9.1
CVE-2019-20029
An exploitable privilege escalation vulnerability exists in the WebPro functionality...
High
8.8
Affected Vendor
Affected Software
um8000 firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
July 29th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.