Vulnerability Details CVE-2023-32748
The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 56.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-32748
-
cpe:2.3:a:mitel:mivoice_connect:-
-
cpe:2.3:a:mitel:mivoice_connect:19.1
-
cpe:2.3:a:mitel:mivoice_connect:19.3
-
cpe:2.3:a:mitel:mivoice_connect:21.84.5535.0
-
cpe:2.3:a:mitel:mivoice_connect:21.90.9743.0
-
cpe:2.3:a:mitel:mivoice_connect:22.20.2300.0
-
cpe:2.3:a:mitel:mivoice_connect:22.24.1500.0