Lucene search

K
cvelistMitreCVELIST:CVE-2023-39285
HistorySep 14, 2023 - 12:00 a.m.

CVE-2023-39285

2023-09-1400:00:00
mitre
www.cve.org
3
mitel
mivoice connect
edge gateway
vulnerability
csrf
attack
request validation
exploit
system configuration settings

AI Score

5

Confidence

High

EPSS

0.001

Percentile

20.6%

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modified URL, potentially enabling them to modify system configuration settings.

AI Score

5

Confidence

High

EPSS

0.001

Percentile

20.6%

Related for CVELIST:CVE-2023-39285