Vulnerability Details CVE-2025-67822
A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.2%
CVSS Severity
CVSS v3 Score 9.4
References
Products affected by CVE-2025-67822
-
cpe:2.3:a:mitel:mivoice_mx-one:7.3
-
cpe:2.3:a:mitel:mivoice_mx-one:7.4
-
cpe:2.3:a:mitel:mivoice_mx-one:7.5
-
cpe:2.3:a:mitel:mivoice_mx-one:7.6
-
cpe:2.3:a:mitel:mivoice_mx-one:7.7
-
cpe:2.3:a:mitel:mivoice_mx-one:7.8