CVE Watch—

CVE-2022-40765

Mitel MiVoice Connect Command Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

10.5%

p95

KEV

SÍ

21 feb 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

10.5%EPSS · 30 días10.5%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Mitel / MiVoice Connect

Vulnerabilidad

Mitel MiVoice Connect Command Injection Vulnerability

Añadido a KEV

21 feb 2023

Remediar antes de

14 mar 2023

Uso conocido en ransomware

Sí

Descripción resumida

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

Acción requerida

Apply updates per vendor instructions.

Notas

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007; https://nvd.nist.gov/vuln/detail/CVE-2022-40765

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-29499—

99.0%

KEV—80Mitel MiVoice Connect Data Validation Vulnerability—CVE-2022-41223—

95.3%

KEV—79Mitel MiVoice Connect Code Injection Vulnerability—