CVE-2023-39291
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in the Connect Mobility Router component of MiVoice Connect through version 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration.
Risk Assessment
A successful exploit could allow an attacker to view system information, potentially leading to further security breaches.
Recommendation
It is recommended to review and improve the configuration of the Connect Mobility Router component to minimize the risk of information disclosure.
Other vulnerabilities in Connect Mobility Router
See all- CVE-2023-39289High
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.
- CVE-2023-39288Medium
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through version 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization.
Original NVD description (English source)
A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS