Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-80276

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Comelit Group S.p.A. 1456B Multi-User Gateway

Default version status: unknown

  • 2.9.1affected
  • 2.10.0affected

References