CVE-2023-39285

published 2023-09-14

CVE-2023-39285: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a…

Priority P4 21 medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C N I L A N

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modified URL, potentially enabling them to modify system configuration settings.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mitel	mivoice_connect	< 22.24.7100.0	22.24.7100.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-352