CVE-2023-39289
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.
Risk Assessment
The organization may be exposed to the disclosure of sensitive system information, potentially leading to further attacks or security breaches.
Recommendation
It is recommended to review and improve the configuration of the Connect Mobility Router component to minimize the risk of enumeration attacks.
Other vulnerabilities in Connect Mobility Router
See all- CVE-2023-39291Medium
A vulnerability in the Connect Mobility Router component of MiVoice Connect through version 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration.
- CVE-2023-39288Medium
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through version 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization.
Original NVD description (English source)
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.