KEVIntel
Back to KEVs
6.8
CVSS
Medium

CVE-2022-40765

PUBLISHED

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with...

Exploited in the wild Used in malware Low complexity No user interaction
Vendor
Mitel
Product
MiVoice Connect
Published
Nov 22, 2022
EPSS
—

Description

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.

cisa malware ransomware

CVSS scores

CVSS v3.1 6.8 Medium

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2023-02-21 00:00:00 UTC · Source

Used in malware

Recorded 2023-02-21 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Feb 21, 2023

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Exploit Used in Malware

  • Added to KEVIntel