CVE Watch—

CVE-2022-41223

Mitel MiVoice Connect Code Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

10.7%

p96

KEV

SIM

21 de fev. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

10.7%EPSS · 30 dias10.7%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Mitel / MiVoice Connect

Vulnerabilidade

Mitel MiVoice Connect Code Injection Vulnerability

Adicionado ao KEV

21 de fev. de 2023

Corrigir até

14 de mar. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008; https://nvd.nist.gov/vuln/detail/CVE-2022-41223

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2022-294999.8 CRÍ

99.0%

KEV—80Mitel MiVoice Connect Data Validation Vulnerability92d CVE-2022-40765—

95.8%

KEV—79Mitel MiVoice Connect Command Injection Vulnerability—