CVE:CVE-2023-22286
CNNVD:CNNVD-202301-921
MAHO-PBX NetDevancer series是日本MAHO-PBX公司的一个 IP-PBX 系统。
MAHO-PBX NetDevancer series 存在安全漏洞，该漏洞源于在Management screen存在跨站请求伪造(CSRF)，攻击者利用该漏洞可能会诱导用户在登录时查看恶意页面，执行意外操作，以下产品和版本受到影响：MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud Ver.1.11.00 之前版本、 MAHO-PBX NetDevancer MobileGate Home/Office Ver.1.11.00 之前版本、MAHO-PBX NetDevancer VSG Lite/Uni 1.11.00 之前版本。
solution:Upgrade ate-mahoroba maho-pbx_netdevancer_firmware to a higher version than 1.11.00,and avoid the version (,1.11.00); Upgrade ate-mahoroba maho-pbx_netdevancer_vsg_firmware to a higher version than 1.11.00,and avoid the version (,1.11.00); Upgrade ate-mahoroba maho-pbx_netdevancer_mobilegate_firmware to a higher version than 1.11.00,and avoid the version (,1.11.00)