Mitel Mivoice Sårbarheter

Tidslinje

Version

9.6.2304.102	3
9.6.2208.101	3
19.3 SP2	3
19.0	3
19.1	3

Åtgärd

Official Fix	9
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	26

Utnyttjbarhet

High	4
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	32

Åtkomstvektor

Not Defined	0
Physical	0
Local	2
Adjacent	15
Network	19

Autentisering

Not Defined	0
High	0
Low	14
None	22

Användarinteraktion

Not Defined	0
Required	8
None	28

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	10
≤7	8
≤8	9
≤9	3
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	10
≤7	9
≤8	8
≤9	3
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	11
≤6	12
≤7	5
≤8	6
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	3
≤7	9
≤8	4
≤9	2
≤10	8

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	1

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	7
<2k	22
<5k	7
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	31
<2k	5
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (38): 1.2.5, 1.2.5.1, 1.2.5.2, 1.2.5.3, 1.2.5.4, 1.2.5.5, 1.2.5.6, 1.2.5.7, 1.2.5.8, 1.2.5.9, 1.2.5.11, 1.2.5.12, 1.2.5.13, 1.2.5.14, 1.2.5.15, 1.2.5.16, 1.2.5.17, 1.2.5.18, 1.2.5.19, 1.2.5.21, 1.2.5.22, 1.2.5.23, 1.5, 1.5.1, 1.5.2, 5.1.0.SP4, 5.1.0.SP5, 9.6.2208.101, 9.6.2304.102, 19.0, 19.1, 19.2, 19.2 SP3, 19.3, 19.3 SP2, 19.3 SP3, R5.0, R19.3 SP3

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
14/09/2023	4.3	4.3	Mitel MiVoice Connect Connect Mobility Router förfalskning på begäran över webbplatsen	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-39286
14/09/2023	4.3	4.3	Mitel MiVoice Connect Edge Gateway förfalskning på begäran över webbplatsen	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-39285
26/08/2023	4.2	4.2	Mitel MiVoice Connect Connect Mobility Router informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-39291
26/08/2023	5.9	5.9	Mitel MiVoice Connect Connect Mobility Router informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-39289
26/08/2023	5.5	5.5	Mitel MiVoice Connect Connect Mobility Router privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-39288
26/08/2023	5.5	5.5	Mitel MiVoice Connect Edge Gateway privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-39287
26/08/2023	4.2	4.2	Mitel MiVoice Connect Edge Gateway informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-39290
14/08/2023	7.6	7.6	Mitel MiVoice Office 400 SMB Controller sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01	CVE-2023-39292
14/08/2023	7.6	7.6	Mitel MiVoice Office 400 SMB Controller privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-39293
14/08/2023	8.0	8.0	Mitel MiVoice Connect Linux DVS Server privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-32748