Plaintext Password Exposure in Slican IPx Telephone Exchange Services

CVE-2026-63315

What is CVE-2026-63315?

The WebCTI service utilized by Slican IPx telephone exchanges presents a security risk by storing temporary subscriber passwords in plaintext format. This flaw allows an attacker, who gains unauthorized access to the database, to extract user passwords easily, potentially compromising subscriber accounts. This vulnerability has been rectified in version 6.62.0100 of the IPx series, emphasizing the importance of updating to the latest software version to safeguard user information.

References