CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-04-26
Mitel MiVoice Connect Service Appliance Remote Code Execution Vulnerability Advisory (CVE-2022-29499)
[Affected Scope] Mitel MiVoice Connect through 19.2 SP3 Service Appliances (SA 100, SA 400, and Virtual SA).
[Impact] Unauthenticated remote attackers can exploit incorrect data validation to execute arbitrary code and gain full control over the affected appliance.
[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces from the public internet.