CVE-2023-31458

CRITICAL 9.8CVE-2023-31458 · Published 24/05/2023 · updated 17/06/2026

In short

CVE-2023-31458 is a CRITICAL (CVSS 9.8) vulnerability affecting mivoice connect (mitel).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mivoice connect mitel	`≤ 22.24.1500.0`	No fix yet

Description

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change. A successful exploit could allow an attacker to make arbitrary configuration changes and execute arbitrary commands.

References

mitel.com/support/security-advisories · Vendor Advisory
mitel.com/support/security-advisories/mitel-product-security-advisory-23-0005 · Vendor Advisory

More vulnerabilities in mivoice connect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mivoice connect

mitel

≤ 22.24.1500.0

No fix yet

Description

More vulnerabilities in mivoice connect

See all →