CVE-2019-20029 - An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices

Back Back to CVE browser

HIGH

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices

Published Jul 29, 2020

8.8

HIGH

CVSS 3.1

EPSS 1.58%

Description

An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged account, including an undocumented developer level of access.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://shadytel.su/files/nec_cve.txt
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://shadytel.su/files/nec_cve.txt		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 29, 2020

Updated Aug 5, 2024

Reserved Dec 27, 2019

Link CVE-2019-20029

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20029

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-20029