Mitel Mivoice Mx-One vulnerabilities

CVE-2025-67822 [CRITICAL] CWE-287 CVE-2025-67822: A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) throu A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts

CVE-2024-36446 [HIGH] CVE-2024-36446: The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authentica The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due to improper access control. A successful exploit could allow an attacker to bypass the authorization schema.