CVE-2023-31460

2023-05-2400:00:00

mitre

www.cve.org

vulnerability

connect mobility router

mivoice connect

authenticated attacker

internal network access

command injection

url parameters

insufficient restriction

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

44.5%

JSON

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters.