Lucene search
HistoryNov 22, 2022 - 1:15 a.m.
CVE-2022-41223
mivoice connect
code-injection
database component
6.8 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.7%
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
Affected configurations
Node
mitelmivoice_connectRange<19.3
ORmitelmivoice_connectMatch19.3-
Related
attackerkb
attackerkb
CVE-2022-41223
2022-11-22 00:00:00
prion
prion
Code injection
2022-11-22 01:15:00
cve
cve
CVE-2022-41223
2022-11-22 01:15:32
cisa_kev
cisa_kev
Mitel MiVoice Connect Code Injection Vulnerability
2023-02-21 00:00:00
cvelist
cvelist
CVE-2022-41223
2022-11-22 00:00:00
cisa
cisa
CISA Adds Three Known Exploited Vulnerabilities to Catalog
2023-02-21 00:00:00
thn
thn
U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog
2023-02-22 05:38:00
6.8 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.7%
Related for NVD:CVE-2022-41223