CVE-2023-39286

MEDIO 4.3CVE-2023-39286 · Published 14/09/2023 · updated 17/06/2026

En resumen

CVE-2023-39286 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a connect mobility router (mitel).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.28%, mayor que el 20.3% de las vulnerabilidades.
Solución: actualizar a 9.6.2307.111 o posterior.

Package	Affected versions	Patched versions
connect mobility router mitel	`< 9.6.2307.111`	`9.6.2307.111`

Description

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modified URL, potentially enabling them to modify system configuration settings.

References

mitel.com/support/security-advisories/mitel-product-security-advisory-23-0015 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free