CVE-2018-18871

Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).

Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).

La falta de verificación de contraseñas en la interfaz web de los teléfonos VoIP de Gigaset Maxwell Basic, con firmware 2.22.7, permitirían que un atacante remoto (en la misma red que el dispositivo) cambie una contraseña de administrador sin autenticarse (y sin conocer la contraseña original).