CVE-2025-48046 — MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext

CVE-2025-48046

MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext PUBLISHED

Description (CNA)

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

Vendor / product	Versions
MICI Network Co. Ltd. / NetFax Server	affected 0 before 3.0.1.0

CWE-256

CISA-ADP

No English description supplied.

No references supplied.