CVE-2026-80276 PUBLISHED

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Assigner: NCSC-FI
Reserved: 26.08.2026 Published: 01.10.2026 Updated: 01.10.2026

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 7.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	Comelit Group S.p.A.
Product	1456B Multi-User Gateway
Versions	Default: unknown Version 2.9.1 is affected Version 2.10.0 is affected

Credits

Teemu Tapanila finder
Juha Jussila finder

References

Comelit 1456B product page

Problem Types

CWE-306 Missing Authentication for Critical Function CWE

Impacts

CAPEC-115 Authentication Bypass