PT-2023-20059 · Vtech · Vtech Vcs754

Published 2023-04-27 · Updated 2025-01-31 · CVE-2023-25437

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vTech VCS754 versions 1.1.1.A through 1.1.1.G

Description An issue was discovered that allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML.

Recommendations For versions 1.1.1.A through 1.1.1.G, update to version 1.1.1.H or later to resolve the issue.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2023-25437

Affected Products

Vtech Vcs754

References · 6

• 🔥 https://i.imgur.com/aDuiY8q.png · Exploit
• https://osv.dev/vulnerability/CVE-2023-25437 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25437 · Security Note
• https://t.me/cibsecurity/63020 · Telegram Post
• https://yechiel.xyz/vulnerability-in-vtechs-vcs754a-business-phones-exposes-sip-credentials · Note
• https://t.me/cvenotify/109525 · Telegram Post