Slican telephone exchanges implement an administrative protocol that requires authentication. The vulnerability allows an attacker to bypass this requirement by executing a specific command, effectively removing the need for credentials. The weakness is quantified as CWE‑288 and enables attackers to obtain full administrative control of the device, which can be used to alter configuration, deploy malware, or gain persistent access.

Affected products include Slican CCT‑1668, CXS‑0424, IPx, MAC‑6400, and NCP. The vulnerability has been fixed in firmware starting with NCP 1.24.0250 and later, IPx series 6.61.0040 and later, CCT‑1668 6.56.0430 and later, MAC‑6400 6.56.0430 and later, and CXS‑0424 6.30.0510 and later. End‑of‑life variants in versions 4.xx and earlier of CCT‑1668 (CCT1CPU), MAC‑6400, and CXS‑0424 remain vulnerable and will not receive updates without a hardware upgrade. Users of these devices should contact the service department for upgrade options.

The CVSS score of 9.3 indicates critical severity, and the EPSS score is unavailable but the lack of a KEV listing suggests publicly known exploits are not confirmed. The likely attack vector is remote access to the administrative protocol; an attacker with network connectivity can send the bypass command without authenticating. Once the bypass succeeds, the attacker gains full control of the device, potentially compromising the entire telephone network.