CVE-2019-20032: Nec SL1100 Firmware

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem.

Affected products

• Nec SL1100 Firmware: any version
• Nec SL2100 Firmware: any version
• Nec SV8100 Firmware: any version
• Nec SV9100 Firmware: any version

Published 2020-07-29. Last modified 2026-06-17.