CVE Intelligence

Mitel Mivoice Business Express vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mitel Mivoice Business Express: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mitel:mivoice_business_express

CVE-2022-26143 Critical · 9.8 KEV High · 67 Public exploit CWE-306 Mar 10, 2022
MiCollab, MiVoice Business Express Access Control Vulnerability
The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.