Vulnerabilidades do Mitel Mivoice Connect
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mitel Mivoice Connect: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:mitel:mivoice_connect
CVE-2022-41223
Média · 6.8
KEV Alta · 62 Ransomware CWE-94 21/11/2022
Mitel MiVoice Connect Code Injection Vulnerability
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
CVE-2022-40765
Média · 6.8
KEV Alta · 62 Ransomware CWE-77 21/11/2022
Mitel MiVoice Connect Command Injection Vulnerability
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.
CVE-2022-29499
Crítica · 9.8
KEV Urgente · 73 Ransomware CWE-20 25/04/2022
Mitel MiVoice Connect Data Validation Vulnerability
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.