Lucene search

K
cve[email protected]CVE-2023-39288
HistoryAug 25, 2023 - 10:15 p.m.

CVE-2023-39288

2023-08-2522:15:10
CWE-88
web.nvd.nist.gov
15
mitel mivoice connect
vulnerability
command injection
cve-2023-39288
nvd

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.

Affected configurations

NVD
Node
mitelmivoice_connectRange9.6.2304.102

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Related for CVE-2023-39288