Comelit Group S.p.A. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Comelit Group S.p.A. products: 2 record(s), with severity, exploitation and fixes.

1456B Multi-User Gateway 2

Exploited only (KEV) →

CVE-2026-80276 High · 7.5 CWE-306 Oct 1, 2026

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

CVE-2026-80275 High · 8.8 CWE-425 Oct 1, 2026

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.