Vulnerability in Com2001 Alexis Server
CVE-2001-1254
Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.
EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.
Affected products
- Com2001 Alexis_server — versions 2.0, 2.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)