Firetruck

CVE-2022-41223

KEV · Ransomware

Mitel MiVoice Connect Code Injection Vulnerability

View CVE record →
Vendor / Project
Mitel
Product
MiVoice Connect
Date added
Feb 21, 2023
Due date
Mar 14, 2023
Known ransomware use
Known
CWEs
CWE-94

Description

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

Required action

Apply updates per vendor instructions.

Notes