Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-39286
HistorySep 14, 2023 - 12:00 a.m.

CVE-2023-39286

2023-09-1400:00:00
mitre
github.com
vulnerability
mitel
csrf
attack
insufficient validation
configuration settings

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modified URL, potentially enabling them to modify system configuration settings.

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-39286