CoreCVE
Back

CRITICAL

Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password)

Published Dec 20, 2018

Description

Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-640

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 20, 2018
Updated Aug 5, 2024
Reserved Oct 31, 2018
Link CVE-2018-18871
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-18871
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-18871