CVE Watch—

CVE-2022-40765

Mitel MiVoice Connect Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

10.6%

p96

KEV

SIM

21 de fev. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

10.6%EPSS · 30 dias10.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Mitel / MiVoice Connect

Vulnerabilidade

Mitel MiVoice Connect Command Injection Vulnerability

Adicionado ao KEV

21 de fev. de 2023

Corrigir até

14 de mar. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007; https://nvd.nist.gov/vuln/detail/CVE-2022-40765

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2022-294999.8 CRÍ

99.0%

KEV—80Mitel MiVoice Connect Data Validation Vulnerability92d CVE-2022-41223—

95.8%

KEV—79Mitel MiVoice Connect Code Injection Vulnerability—