CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-31458

CVSS 9.8v3.1pub. 2023-05-24upd. 2025-01-31

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A successful exploit could allow an attacker to make arbitrary configuration changes and execute arbitrary commands.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitel Mivoice Connect

    APP
    Mitel
    ≤ 22.24.1500.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-29499CRITICAL9.8⚠ KEVten sam produkt

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because...

CVE-2023-32748CRITICAL9.8ten sam produkt

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthe...

CVE-2023-31457CRITICAL9.8ten sam produkt

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0)...

CVE-2020-10211CRITICAL9.8ten sam produkt

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an...

CVE-2023-39289HIGH7.5ten sam produkt

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could a...