CVE-2014-5335: Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow...

Security readout for executives and security teams

CVE-2014-5335 is a CSRF issue in innovaphone PBX 10.00 sr11 and earlier. If an administrator is logged in and visits attacker-controlled content, the attacker may cause configuration or account changes without the administrator intending them. Organizations running innovaphone PBX 10.00 sr11 or earlier are potentially exposed, especially where administrators can browse untrusted sites while authenticated to the PBX management interface. Prioritize if innovaphone PBX administration is reachable beyond a controlled management network. The business risk is unauthorized PBX administration, including account creation or administrator lockout, but public exploitation evidence is not provided. Mitigation focus: Check innovaphone support or advisories for fixed versions and vendor guidance.; Restrict PBX administration access to trusted management networks or VPN.; Avoid internet exposure of PBX administrative interfaces..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.