← Back

Slican

slican

2 CVEs • 16 products

Products (16)

Click to collapse
Toggle
Webcti
webcti
1 CVE
Ncp Firmware
ncp_firmware
1 CVE
Ipl 256 Firmware
ipl-256_firmware
1 CVE
Ipm 032 Firmware
ipm-032_firmware
1 CVE
Ipu 14 Firmware
ipu-14_firmware
1 CVE
Ncp Server Cm300p
ncp_server_cm300p
0 CVEs
Ncp Server Cm300p.1bc
ncp_server_cm300p.1bc
0 CVEs
Ncp Server Cm400p.1bc
ncp_server_cm400p.1bc
0 CVEs
Ncp Server Cm600p.1bc
ncp_server_cm600p.1bc
0 CVEs
Ipl 256.3u
ipl-256.3u
0 CVEs
Ipl 256.wm
ipl-256.wm
0 CVEs
Ipm 032.2u
ipm-032.2u
0 CVEs
Ipm 032.wm
ipm-032.wm
0 CVEs
Ipu 14.103.wm
ipu-14.103.wm
0 CVEs
Ipu 14.105.1u
ipu-14.105.1u
0 CVEs
Ipu 14.105.wm
ipu-14.105.wm
0 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-14577
1Slican
4Ipl 256 Firmware
Ipm 032 FirmwareIpu 14 Firmware+1 more
Jun 17, 2026
Feb 24, 2026
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote attacker is able to execute arbitrary PHP commands by sending specially crafted requests to /webcti/session_ajax.php endp...Show more
Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote attacker is able to execute arbitrary PHP commands by sending specially crafted requests to /webcti/session_ajax.php endpoint. This issue was fixed in version 1.24.0190 (Slican NCP) and 6.61.0010 (Slican IPL/IPM/IPU).Show less
CVE-2021-45813
1Slican
1Webcti
Jun 17, 2026
Dec 28, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker can steal the user's session by injecting malicious JavaScript codes which leads to Session Hijacking and cause user's crede...Show more
SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker can steal the user's session by injecting malicious JavaScript codes which leads to Session Hijacking and cause user's credentials theft.Show less