PatchTheCVEate-mahoroba vulnerabilities
Recent CVEs affecting ate-mahoroba products. 4 tracked.
ate-mahoroba has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-01-17. Highest priority: CVE-2023-22279 (score 56/100).
- CVE-2023-22296 MEDIUM 6.1 UPGRADE UPGRADE Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/
- CVE-2023-22286 HIGH 8.1 UPGRADE UPGRADE Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.0
- CVE-2023-22280 HIGH 7.2 UPGRADE UPGRADE MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1
- CVE-2023-22279 CRITICAL 9.8 UPGRADE UPGRADE MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1
FAQ
How do I fix ate-mahoroba vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ate-mahoroba being exploited right now?
None of the tracked ate-mahoroba CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ate-mahoroba CVE should I patch first?
CVE-2023-22279 currently ranks highest (56/100): MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.