Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-80275

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Comelit Group S.p.A. 1456B Multi-User Gateway

Default version status: unknown

  • 2.9.1affected
  • 2.10.0affected

References