CVE-2023-33760

Published: Jan 25, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.

Affected (1)

Products: Splicecom: Maximiser Soft Pbx

Splicecom

1 product

Maximiser Soft Pbx

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Splicecom Maximiser Soft Pbx	Up to 1.5

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://github.com/twignet/splicecom

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/twignet/splicecom

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.