CVE Watch—

CVE-2022-41223

Mitel MiVoice Connect Code Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

10.6%

p95

KEV

SÍ

21 feb 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

10.6%EPSS · 30 días10.6%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Mitel / MiVoice Connect

Vulnerabilidad

Mitel MiVoice Connect Code Injection Vulnerability

Añadido a KEV

21 feb 2023

Remediar antes de

14 mar 2023

Uso conocido en ransomware

Sí

Descripción resumida

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

Acción requerida

Apply updates per vendor instructions.

Notas

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008; https://nvd.nist.gov/vuln/detail/CVE-2022-41223

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-29499—

99.0%

KEV—80Mitel MiVoice Connect Data Validation Vulnerability—CVE-2022-40765—

95.2%

KEV—79Mitel MiVoice Connect Command Injection Vulnerability—