maho-pbx netdevancer firmware vulnerabilities and fixes

Recent CVEs affecting maho-pbx netdevancer firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: maho pbx netdevancer firmware, maho-pbxnetdevancerfirmware.

maho-pbx netdevancer firmware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-01-17. Highest priority: CVE-2023-22279 (score 56/100).

• CVE-2023-22296 MEDIUM 6.1 UPGRADE UPGRADE Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/
• CVE-2023-22286 HIGH 8.1 UPGRADE UPGRADE Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.0
• CVE-2023-22280 HIGH 7.2 UPGRADE UPGRADE MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1
• CVE-2023-22279 CRITICAL 9.8 UPGRADE UPGRADE MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1

FAQ

How do I fix maho-pbx netdevancer firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is maho-pbx netdevancer firmware being exploited right now?

None of the tracked maho-pbx netdevancer firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which maho-pbx netdevancer firmware CVE should I patch first?

CVE-2023-22279 currently ranks highest (56/100): MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.

RSS feed for maho-pbx netdevancer firmware · ← Back to latest CVEs