Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-48046

MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MICI Network Co. Ltd. NetFax Server

Default version status: unknown

  • 0 to < 3.0.1.0affected

References