Lucene search

CVE-2022-26143

🗓️ 10 Mar 2022 00:00:00Reported by AttackerKBType

The Mitel MiCollab and MiVoice Business Express TP-240 component allows remote attackers to obtain sensitive information and cause denial of service, exploited in the wild for TP240PhoneHome DDoS attack

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Mitel MiCollab <= 9.4 SP1 Information Disclosure and DoS (22-0001)	11 Jun 202400:00	–	nessus
Tenable Nessus	Mitel MiVoice <= 8.1 SP1 Information Disclosure and DoS (22-0001)	11 Jun 202400:00	–	nessus
NVD	CVE-2022-26143	10 Mar 202217:47	–	nvd
NVD	CVE-2022-26487	6 Mar 202203:15	–	nvd
CISA KEV Catalog	MiCollab, MiVoice Business Express Access Control Vulnerability	25 Mar 202200:00	–	cisa_kev
The Hacker News	Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times	9 Mar 202213:26	–	thn
Prion	Code injection	10 Mar 202217:47	–	prion
Cvelist	CVE-2022-26143	9 Mar 202215:32	–	cvelist
Vulnrichment	CVE-2022-26143	9 Mar 202215:32	–	vulnrichment
Akamai Blog	CVE-2022-26143: TP240PhoneHome Reflection/Amplification DDoS Attack Vector	8 Mar 202214:00	–	akamaiblog

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
mitel	www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-22-0001
akamai	www.akamai.com/blog/security/phone-home-ddos-attack-vector
shadowserver	www.shadowserver.org/news/cve-2022-26143-tp240phonehome-reflection-amplification-ddos-attack-vector/
news	www.news.ycombinator.com/item
blog	www.blog.cloudflare.com/cve-2022-26143/
team-cymru	www.team-cymru.com/blog/2022/03/08/record-breaking-ddos-potential-discovered-cve-2022-26143/
arstechnica	www.arstechnica.com/information-technology/2022/03/ddosers-use-new-method-capable-of-amplifying-traffic-by-a-factor-of-4-billion/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Mar 2022 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS29

CVSS39.8

EPSS0.6477