100M Ip Phones
Approved changes feed: RSS · Atom
cpe:2.3:a:atcom_technology_co.,_ltd.:100m_ip_phones:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Atcom Technology Co., Ltd. (a2ff2975-f52e-5b05-b885-ff145f4cef32) |
|---|---|
| Product | 100M Ip Phones (cf49381c-f860-5c43-88ad-16fcad060204) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-58314 |
vulnerable | 2026-06-08 06:56:14.419646 |
Atcom 2.7.x.x Authenticated Command Injection via Web Configuration CGI
HIGH (8.8)
Atcom 100M IP Phones firmware version 2.7.x.x contains an authenticated command injection vulnerability in the web configuration CGI script that allows attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'cmd' parameter in web_cgi_main.cgi, enabling remote code execution with administrative credentials.
Published: 2025-12-12T19:57:07.938Z
Updated: 2026-04-07T14:08:56.282Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.