Slican IPx WebCTI: Plaintext storage of subscriber password
Summary
The WebCTI service for Slican IPx telephone exchanges stores a temporary subscriber password in plaintext. An attacker with access to the database can read the password and log in to the subscriber's account. The advisory describes database access as a precondition, and no public exploit is documented.
Affected
- Slican IPx series, versions before 6.62.0100 (per CERT Polska and the CVE record)
- Earlier affected versions below 6.62.0100: Unknown.
- Whether the EOL models CCT-1668, MAC-6400 and CXS-0424 are affected by this CVE: Unknown.
Fixed in
- Upgrade to IPx series version 6.62.0100 or later.
Workaround
- Unknown. No vendor or CERT Polska workaround is documented for this CVE.
- Restrict access to the WebCTI service and the database to management networks until the upgrade is done.
Exploitation
- No exploitation in the wild is documented.
- Not listed in CISA KEV.
- CISA SSVC: Exploitation none, not automatable, partial technical impact.
- VulDB rates remote exploitation as possible, with no exploit available; this is not independently verified.
Our recommendation
- Inventory all Slican IPx systems and confirm the running version.
- Upgrade to IPx 6.62.0100 or later, following Slican's guidance.
- Restrict WebCTI and database access to management networks until patched.
- Check whether WebCTI is reachable from outside your network.
- After patching, consider resetting subscriber passwords as a precaution, since passwords stored before the fix may have been exposed.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CERT Polska advisory cert.pl
- CVE record (cvelistV5) raw.githubusercontent.com
- Slican WebCTI product page www.slican.pl
- VulDB entry vuldb.com
- OpenCVE CVE-2026-63315 app.opencve.io
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 16:03.
Original description (NVD)
WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.