Mitel Mivoice Connect vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mitel Mivoice Connect: 3 record(s), with affected versions and fixes.cpe:2.3:a:mitel:mivoice_connect
CVE-2022-41223
Medium · 6.8
KEV High · 62 Ransomware CWE-94 Nov 21, 2022
Mitel MiVoice Connect Code Injection Vulnerability
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
CVE-2022-40765
Medium · 6.8
KEV High · 62 Ransomware CWE-77 Nov 21, 2022
Mitel MiVoice Connect Command Injection Vulnerability
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.
CVE-2022-29499
Critical · 9.8
KEV Urgent · 73 Ransomware CWE-20 Apr 25, 2022
Mitel MiVoice Connect Data Validation Vulnerability
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.