Lucene search

K
nvd[email protected]NVD:CVE-2023-39287
HistoryAug 25, 2023 - 10:15 p.m.

CVE-2023-39287

2023-08-2522:15:10
CWE-88
web.nvd.nist.gov
3
mitel
mivoice connect
edge gateway
vulnerability
command injection
parameter sanitization
network access
network traffic

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

34.8%

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.

Affected configurations

Nvd
Node
mitelmivoice_connectRange22.24.5800.0
VendorProductVersionCPE
mitelmivoice_connect*cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

34.8%

Related for NVD:CVE-2023-39287