CVE-2023-39293
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.
Risk Assessment
This vulnerability could lead to unauthorized access and potential system takeover, posing a serious security threat to the organization.
Recommendation
It is recommended to update the MiVoice Office 400 SMB Controller to the latest version to mitigate this vulnerability and conduct a security audit of the system.
Original NVD description (English source)
A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.