Lucene search

K
nvd[email protected]NVD:CVE-2023-39288
HistoryAug 25, 2023 - 10:15 p.m.

CVE-2023-39288

2023-08-2522:15:10
CWE-88
web.nvd.nist.gov
vulnerability
mitel mivoice connect
command injection
network access
cve-2023-39288

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

5.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.

Affected configurations

NVD
Node
mitelmivoice_connectRange9.6.2304.102

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L

5.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

Related for NVD:CVE-2023-39288