Slican CVEs & Vulnerabilities

1 CVEs affecting Slican products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

ipm-032 firmware 1ipu-14.105.1u 1ncp server cm400p.1bc 1ipl-256.3u 1ipl-256.wm 1ncp server cm600p.1bc 1ipu-14.105.wm 1ipm-032.2u 1

CVE-2025-14577CRITICAL

Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote attacker is able to execute arbitrary PHP commands by sending specially crafted requests to /webcti/session_ajax.php endpoint. This issue was fixed in version 1.24.0190 (Slican NCP) and 6.61.0010 (Slican IPL/IPM/IPU).

24 Feb 2026

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database