CVE-2026-63315

8.2High

Published 15 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

8.2High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on confidentiality
Weakness: CWE-256

Impact

Attackers with database access can recover plaintext temporary subscriber passwords and take over subscriber accounts. Network access to the database or an existing database compromise is required first.

Root cause

The WebCTI service stores temporary subscriber passwords in the database as plaintext instead of cryptographic hashes.

Affected systems

Slican IPx series prior to version 6.62.0100.

CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Fix & remediation

Upgrade the Slican IPx firmware to version 6.62.0100 or later. If updating immediately is not possible, restrict database access strictly to the PBX host and force credential rotations.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-63315