Mici Network Co. Ltd. Netfax Server
3 CVEs affecting Mici Network Co. Ltd. Netfax Server. Latest disclosed: 2025-05-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-48047 | | 2025-05-29 | An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint. | |
CVE-2025-48046 | | 2025-05-29 | An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint. | |
CVE-2025-48045 | | 2025-05-29 | An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials. |