← Back

Splicecom

splicecom

4 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Maximiser Soft Pbx
maximiser_soft_pbx
3 CVEs
Ipcs
ipcs
1 CVE
Ipcs2
ipcs2
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33760
1Splicecom
1Maximiser Soft Pbx
Jun 17, 2026
Jan 25, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.
CVE-2023-33759
1Splicecom
1Maximiser Soft Pbx
Jun 17, 2026
Jan 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.
CVE-2023-33758
1Splicecom
1Maximiser Soft Pbx
Jun 17, 2026
Jan 25, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component.
CVE-2023-33757
1Splicecom
2Ipcs
Ipcs2
Jun 17, 2026
Jan 25, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle a...Show more
A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack.Show less