CVE-2025-0680 in OM500 IP-PBX

Tóm tắt

Bởi MITRE • 30/01/2025

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• chịu trách nhiệm: Icscert
• Đặt trước: 23/01/2025
• Tiết lộ: 30/01/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-294137
• CPE: sẵn sàng
• CWE: CWE-78 (Đã xác nhận)
• CVSS: 9.8 (CNA)
• EPSS: 0.00609
• KEV: không
• Các hoạt động: rất thấp
• ngành: Energy, Chemical, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-0680
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-0680
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-0680/