CVE-2023-39292
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through version 1.2.5.23, which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.
Risk Assessment
This vulnerability could lead to the exposure of confidential data and unauthorized access to the system, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the MiVoice Office 400 SMB Controller to the latest version to mitigate this vulnerability and conduct a security audit of the system.
Original NVD description (English source)
A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.