← Back

CVE-2018-19275

nvd nist
Published: Apr 2, 2019Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.

Affected (7)

Mitel
2 products
Cmg Suite
Inattend
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Mitel
Cmg Suite
Before 8.4
Cmg Suite
Version 8.4
Cmg Suite
Version 8.4 sp2
Mitel
Inattend
Before 2.5
Inattend
Version 2.5
Inattend
Version 2.5 sp1
Inattend
Version 2.5 sp2

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.