CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-22
Mitel MiVoice Connect Director Database Code Injection and Remote Code Execution Vulnerability (CVE-2022-41223) Analysis & Mitigation Guide
[Affected Scope] Mitel MiVoice Connect 19.3 (version 22.22.6100.0 and prior)
[Impact] Authenticated attackers can execute arbitrary code via crafted database inputs, potentially leading to full system compromise
[Mitigation] Apply the official security patches provided in Mitel Advisory 22-0008 immediately and restrict database access