CVE:CVE-2023-22279
CNNVD:CNNVD-202301-923
MAHO-PBX NetDevancer series是日本MAHO-PBX公司的一个 IP-PBX 系统。
MAHO-PBX NetDevancer存在安全漏洞，该漏洞源于在Management screen存在操作系统命令注入，远程攻击者利用该漏洞可能会执行任意操作系统命令，以下产品和版本受到影响：MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud Ver.1.11.00 之前版本、 MAHO-PBX NetDevancer MobileGate Home/Office Ver.1.11.00 之前版本、MAHO-PBX NetDevancer VSG Lite/Uni 1.11.00 之前版本。
solution:Upgrade ate-mahoroba maho-pbx_netdevancer_firmware to a higher version than 1.11.00,and avoid the version (,1.11.00); Upgrade ate-mahoroba maho-pbx_netdevancer_vsg_firmware to a higher version than 1.11.00,and avoid the version (,1.11.00); Upgrade ate-mahoroba maho-pbx_netdevancer_mobilegate_firmware to a higher version than 1.11.00,and avoid the version (,1.11.00)