Vulnerability Details CVE-2022-40765
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.3%
CVSS Severity
CVSS v3 Score 6.8
Proposed Action
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
Ransomware Campaign
Known
References
Products affected by CVE-2022-40765
-
cpe:2.3:a:mitel:mivoice_connect:-
-
cpe:2.3:a:mitel:mivoice_connect:19.1
-
cpe:2.3:a:mitel:mivoice_connect:19.3