PatchTheCVEmaximiser soft pbx vulnerabilities and fixes
Recent CVEs affecting maximiser soft pbx, with upgrade or downgrade steps. 3 tracked.
Also searched as: maximisersoftpbx.
maximiser soft pbx has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-01-25. Highest priority: CVE-2023-33759 (score 58/100).
- CVE-2023-33760 MEDIUM 5.3 UPGRADE SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate
- CVE-2023-33759 CRITICAL 9.8 UPGRADE SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing att
- CVE-2023-33758 MEDIUM 6.1 UPGRADE Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerabil
FAQ
How do I fix maximiser soft pbx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is maximiser soft pbx being exploited right now?
None of the tracked maximiser soft pbx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which maximiser soft pbx CVE should I patch first?
CVE-2023-33759 currently ranks highest (58/100): SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing att.