Critical severity9.8NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026
CVE-2018-18871
CVE-2018-18871
Description
Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).
Affected products
1- Range: = 2.22.7
Patches
Vulnerability mechanics
References
1- www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Gigaset_Maxwell.pdfnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.