CVE-2023-39287
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization.
Risk Assessment
A successful exploit could allow an attacker to access network information and to generate excessive network traffic, potentially disrupting system operations.
Recommendation
It is recommended to update to the latest software version and implement additional security measures to restrict access to the Edge Gateway component.
Original NVD description (English source)
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.