CRITICAL🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2022-29499

CVSS 9.8v3.1pub. 2022-04-26upd. 2025-11-03

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitel Mivoice Connect

    APP
    Mitel
    ≤ 22.20.2300.0

CISA KEV — detailsi

Vendori
Mitel
Producti
MiVoice Connect
Added to KEVi
June 27, 2022
Remediation deadline (US Federal)i
July 18, 2022(overdue)
Ransomwarei
Active ransomware campaigns exploit this vulnerability
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
☠️WYKORZYSTYWANE W RANSOMWARE⏰CISA DEADLINE: 18 lipca 2022
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-32748CRITICAL9.8ten sam produkt

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthe...

CVE-2023-31458CRITICAL9.8ten sam produkt

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and ea...

CVE-2023-31457CRITICAL9.8ten sam produkt

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0)...

CVE-2020-10211CRITICAL9.8ten sam produkt

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an...

CVE-2023-39289HIGH7.5ten sam produkt

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could a...