The vulnerability arises from a predictable generation of a secure key within Slican telephone exchanges. An unauthenticated attacker can calculate this key using exposed properties of the device and subsequently gain administrative credentials. Based on the description, it is inferred that, once these credentials are obtained, the attacker could alter configurations or potentially gain control over the device, which could impact confidentiality, integrity, and availability. The weakness is classified under CWE‑1391, reflecting that the mechanism for establishing secure credentials is insecure.

The flaw affects multiple Slican telephone exchange models, including IPx, CCT‑1668, MAC‑6400, and CXS‑0424. Firmware versions up to 6.61.0040 for IPx, 6.56.0430 for CCT‑1668 and MAC‑6400, and 6.30.0510 for CXS‑0424 contain the vulnerability. The issue remains unpatched in end‑of‑life products using firmware 4.xx or earlier for the CCT‑1668 (CCT1CPU), MAC‑6400, and CXS‑0424 lines, which will never receive software updates and require hardware modifications for any patch to be applied.

With a CVSS score of 8.7 the vulnerability is classified as high severity, and it is not listed in the CISA KEV catalog. The EPSS score is unavailable, but the ability for an attacker to deduce credentials without authentication suggests that exploitation is likely in environments where these devices are exposed. Based on the description, it is inferred that once the secure key is deduced, an attacker gains administrative authority directly, without any additional privilege escalation steps. The threat is most acute for organizations that maintain legacy devices on the network without proper isolation or updates.