CVE Watch—

CVE-2022-40765

Mitel MiVoice Connect Command Injection Vulnerability

CVSS

—

No CVSS

EPSS

10.5%

p95

KEV

YES

Feb 21, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

10.5%EPSS · 30 days10.5%

2026-06-302026-07-16

KEV catalog record

Product

Mitel / MiVoice Connect

Vulnerability

Mitel MiVoice Connect Command Injection Vulnerability

Added to KEV

Feb 21, 2023

Remediate by

Mar 14, 2023

Known ransomware use

Yes

Summary description

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

Required action

Apply updates per vendor instructions.

Notes

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007; https://nvd.nist.gov/vuln/detail/CVE-2022-40765

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-29499—

99.0%

KEV—80Mitel MiVoice Connect Data Validation Vulnerability—CVE-2022-41223—

95.3%

KEV—79Mitel MiVoice Connect Code Injection Vulnerability—