Back to Database
Status published
Critical
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices,...
Vulnerability Description
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-20033
Credits & Attribution
No credits recorded in the NVD database.
References
More from nec
View All →CVE-2021-44746
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0...
Medium
5.3
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped...
Medium
6.5
CVE-2019-20031
NEC UM8000, UM4730 and prior non-InMail voicemail systems with all...
Critical
9.1
CVE-2019-20030
An attacker with knowledge of the modem access number on...
High
7.8
CVE-2019-20029
An exploitable privilege escalation vulnerability exists in the WebPro functionality...
High
8.8
Affected Vendor
Affected Software
sv8100 firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
July 29th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.