CVE-2016-2362: Fonality

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection.

Affected products

• Fonality Fonality: version 12.6 only; version 12.8 only; version 14.1i only

Published 2016-06-20. Last modified 2026-06-17.