Vulnerabilidades de Comelit Group S.p.A.
CVEs publicadas que afetam produtos de Comelit Group S.p.A.: 2 registro(s), com severidade, exploração e correções.
CVE-2026-80276
Alta · 7.5
CWE-306 01/10/2026
Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.
CVE-2026-80275
Alta · 8.8
CWE-425 01/10/2026
Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.