Netfax Server

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mici_network_co._ltd.:netfax_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMici Network Co. Ltd. (1536d8be-1983-58a2-8267-02b5f98c0e56)
ProductNetfax Server (1e9994fc-107d-5efe-a858-bbe8dfe7776e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48047 vulnerable 2026-06-08 07:27:15.410464 MICI Network Co. Ltd. NetFax Server Command Injection
An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.
Published: 2025-05-29T12:36:13.667Z
Updated: 2025-05-29T13:15:14.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48046 vulnerable 2026-06-08 07:27:15.410156 MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.
Published: 2025-05-29T12:33:27.734Z
Updated: 2025-09-05T08:30:09.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48045 vulnerable 2026-06-08 07:27:15.409829 MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure
An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.
Published: 2025-05-29T12:29:33.475Z
Updated: 2025-05-29T13:17:57.088Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.