Description
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.
Published: 2026-10-01
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Confidentiality breach
Action: Assess Impact
AI Analysis

Impact

Comelit Multi-User Gateway model 1456B allows an attacker to access the configuration interface without authentication. Through this unsecured endpoint, the device reveals its Remote Configuration Password and other sensitive settings in cleartext, enabling a remote attacker to compromise confidentiality of the system’s configuration data.

Affected Systems

The vulnerability affects Comelit Group S.p.A. Multi-User Gateway 1456B, specifically firmware versions 2.9.1 and 2.10.0.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity impact. While the EPSS score is not available, the lack of authentication means an attacker can easily read configuration data from any network location that can reach the device. This weakness is not currently listed in the CISA KEV catalog, but the exposure of protected credentials remains a significant risk.

Generated by OpenCVE AI on October 1, 2026 at 08:06 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict network access to the gateway’s management interface, for example by placing it behind a firewall or VPN
  • If a newer firmware release is available that requires authentication for management access, upgrade the device promptly
  • If the firmware supports enabling authentication, configure a strong password or certificate-based authentication for the management interface

Generated by OpenCVE AI on October 1, 2026 at 08:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 05 Oct 2026 11:00:00 +0000

Type Values Removed Values Added
References

Thu, 01 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 01 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Comelit Group
Comelit Group 1456b Multi-user Gateway
Vendors & Products Comelit Group
Comelit Group 1456b Multi-user Gateway

Thu, 01 Oct 2026 06:00:00 +0000

Type Values Removed Values Added
Description Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.
Title Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Comelit Group 1456b Multi-user Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: NCSC-FI

Published:

Updated: 2026-10-05T10:46:34.075Z

Reserved: 2026-08-26T07:24:59.712Z

Link: CVE-2026-80276

cve-icon Vulnrichment

Updated: 2026-10-01T15:34:53.571Z

cve-icon NVD

Status : Deferred

Published: 2026-10-01T06:17:10.430

Modified: 2026-10-05T11:17:00.700

Link: CVE-2026-80276

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T15:37:24Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function