Invoxia Nvx220 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Invoxia Nvx220 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-14528 — CVSS 9.8 (critical): Invoxia NVX220 devices allow TELNET access as admin with a default password.
• CVE-2018-14529 — CVSS 7.5 (high): Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes.