Auerswald COMfortel 1200 IP Firmware 3.4.4.1-10589

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:auerswald:comfortel_1200_ip_firmware:3.4.4.1-10589:-:*:*:*:*:*:*

part: o version: 3.4.4.1-10589 update: -

VendorAuerswald (d359b663-41b0-5839-9153-4a9fe3803729)
ProductComfortel 1200 Ip Firmware (c779466c-7bb3-5314-8b51-f2a956045df6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19978 vulnerable 2026-06-08 05:11:16.504158 Details available
A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (authenticated as simple user in the same network as the device) to trigger remote code execution via a POST request (ManufacturerName parameter) to the web server on the device. The web server is running with root privileges and the injected code will also run with root privileges.
Published: 2019-05-29T17:25:15.000Z
Updated: 2024-08-05T11:51:17.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19977 vulnerable 2026-06-08 05:11:16.502883 Details available
A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker (simple user) -- in the same network as the device -- to trigger OS commands (like starting telnetd or opening a reverse shell) via a POST request to the web server.
Published: 2019-05-29T17:18:21.000Z
Updated: 2024-08-05T11:51:17.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.