CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-32748

CVSS 9.8v3.1pub. 2023-08-14upd. 2024-11-21

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitel Mivoice Connect

    APP
    Mitel
    ≤ 22.24.1500.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-29499CRITICAL9.8⚠ KEVten sam produkt

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because...

CVE-2023-31457CRITICAL9.8ten sam produkt

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0)...

CVE-2023-31458CRITICAL9.8ten sam produkt

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and ea...

CVE-2020-10211CRITICAL9.8ten sam produkt

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an...

CVE-2023-39289HIGH7.5ten sam produkt

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could a...