CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-03-10
Mitel MiCollab and MiVoice Business Express Remote Information Disclosure and DDoS Amplification Vulnerability (CVE-2022-26143)
[Affected Scope] Mitel MiCollab versions prior to 9.4 SP1 FP1 and MiVoice Business Express through version 8.1.
[Impact] Unauthenticated remote attackers can access sensitive system information or abuse the system to launch high-volume DDoS amplification attacks (TP240PhoneHome) globally.
[Mitigation] Apply official vendor security patches immediately and restrict external access to the TP-240 driver port (UDP 10074) via firewalls.