Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-39287

Опубликовано: 25 авг. 2023
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*
Версия до 22.24.5800.0 (включая)

EPSS

Процентиль: 35%
0.00145
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 5.5
github
больше 2 лет назад

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.

EPSS

Процентиль: 35%
0.00145
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-88