CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-22
Mitel MiVoice Connect Edge Gateway Remote Command Injection Vulnerability (CVE-2022-40765) Security Advisory
[Affected Scope] Edge Gateway component of Mitel MiVoice Connect through 19.3 (version 22.22.6100.0 and prior)
[Impact] An authenticated attacker with internal network access can execute arbitrary OS commands with system privileges due to insufficient validation of URL parameters
[Mitigation] Apply the official security patches provided by Mitel immediately, or restrict network access to the Edge Gateway management interface