Описание
A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 22.24.1500.0 (включая)
cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00519
Низкий
9.8 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.
EPSS
Процентиль: 66%
0.00519
Низкий
9.8 Critical
CVSS3
Дефекты
NVD-CWE-noinfo