PatchTheCVEsplicecom vulnerabilities
Recent CVEs affecting splicecom products. 4 tracked.
splicecom has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-01-25. Highest priority: CVE-2023-33759 (score 58/100).
- CVE-2023-33760 MEDIUM 5.3 UPGRADE SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate
- CVE-2023-33759 CRITICAL 9.8 UPGRADE SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing att
- CVE-2023-33758 MEDIUM 6.1 UPGRADE Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerabil
- CVE-2023-33757 MEDIUM 5.9 UPGRADE DOWNGRADE A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and
FAQ
How do I fix splicecom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is splicecom being exploited right now?
None of the tracked splicecom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which splicecom CVE should I patch first?
CVE-2023-33759 currently ranks highest (58/100): SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing att.