CVE-2022-29499

CRITICALCISA KEV

9.8

Beschreibung

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht4/26/2022

Zuletzt geandert11/3/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerMitel

ProduktMiVoice Connect

SchwachstellennameMitel MiVoice Connect Data Validation Vulnerability

KEV Aufnahmedatum2022-06-27

Behebungsfrist2022-07-18

Ransomware-NutzungKnown

Betroffene Produkte

mitel:mivoice_connect

Schwachen (CWE)

CWE-20CWE-20

Referenzen

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002(cve@mitre.org)

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29499(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.