Vulnerability Details CVE-2022-41223
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.038
EPSS Ranking 87.6%
CVSS Severity
CVSS v3 Score 6.8
Proposed Action
The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.
Ransomware Campaign
Known
References
Products affected by CVE-2022-41223
-
cpe:2.3:a:mitel:mivoice_connect:-
-
cpe:2.3:a:mitel:mivoice_connect:19.1
-
cpe:2.3:a:mitel:mivoice_connect:19.3