CVE Watch—

CVE-2022-41223

Mitel MiVoice Connect Code Injection Vulnerability

CVSS

—

No CVSS

EPSS

10.6%

p95

KEV

YES

Feb 21, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

10.6%EPSS · 30 days10.6%

2026-06-302026-07-16

KEV catalog record

Product

Mitel / MiVoice Connect

Vulnerability

Mitel MiVoice Connect Code Injection Vulnerability

Added to KEV

Feb 21, 2023

Remediate by

Mar 14, 2023

Known ransomware use

Yes

Summary description

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

Required action

Apply updates per vendor instructions.

Notes

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008; https://nvd.nist.gov/vuln/detail/CVE-2022-41223

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-29499—

99.0%

KEV—80Mitel MiVoice Connect Data Validation Vulnerability—CVE-2022-40765—

95.2%

KEV—79Mitel MiVoice Connect Command Injection Vulnerability—