Description
An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MICI Network | NetFax Server | < 3.0.1.0 | 3.0.1.0 |
High · 8.7
CVE-2025-48045
EUVD-2025-16390GHSA-5pqc-8wc5-jxj6
MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure
Published May 29, 2025 · Updated May 29, 2025 · Assigned by rapid7