CVE-2023-39291
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in the Connect Mobility Router component of MiVoice Connect through version 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration.
Risk Assessment
A successful exploit could allow an attacker to view system information, potentially leading to further security breaches.
Recommendation
It is recommended to review and improve the configuration of the Connect Mobility Router component to minimize the risk of information disclosure.
Original NVD description (English source)
A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.