Vulnerabilities > NEC > Um8000 Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-07-29 CVE-2019-20031 Improper Restriction of Excessive Authentication Attempts vulnerability in NEC Um4730 Firmware and Um8000 Firmware
NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the telephone user interface (TUI), effectively allowing brute force attacks.
network
low complexity
nec CWE-307
critical
 9.1
9.1
2020-07-29 CVE-2019-20030 Unspecified vulnerability in NEC Um8000 Firmware
An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port.
local
low complexity
nec
7.8
7.8