CVE-2025-67822
CriticalSummary
A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 through 7.8 SP1 could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts.
Risk Assessment
Risk of unauthorized access to user and admin accounts, potentially leading to confidentiality and integrity breaches.
Recommendation
Apply available security updates from the vendor and restrict access to the Provisioning Manager component.
Original NVD description (English source)
A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.