1. Home
  2. CVE Database
  3. CVE-2019-20030
HIGH · 7.8

CVE-2019-20030

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affec...

Vulnerability Description

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NecUm8000 FirmwareAll versions
NecUm8000-

References

FAQ

What is CVE-2019-20030?

CVE-2019-20030 is a vulnerability with a CVSS score of 7.8 (HIGH). An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affec...

How severe is CVE-2019-20030?

CVE-2019-20030 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-20030?

Check the references section above for vendor advisories and patch information. Affected products include: Nec Um8000 Firmware, Nec Um8000.