Security Resilience

CVE-2023-31457

Mitel Mivoice Connect ≤ 22.24.1500.0

Published
24 May 2023
Modified
31 January 2025
Patch / advisory
View advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0099 62th percentile
Risk Priority 74 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-31457 is a critical-severity an unspecified weakness vulnerability in Mitel Mivoice Connect. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 38% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-31458Same product: Mitel Mivoice Connect
CVE-2023-25598Same product: Mitel Mivoice Connect
CVE-2023-31459Same product: Mitel Mivoice Connect
CVE-2022-29499Same product: Mitel Mivoice Connect
CVE-2023-39289Same product: Mitel Mivoice Connect
CVE-2023-39287Same product: Mitel Mivoice Connect
CVE-2022-41223Same product: Mitel Mivoice Connect
CVE-2023-39285Same product: Mitel Mivoice Connect
CVE-2023-32748Same product: Mitel Mivoice Connect
CVE-2022-40765Same product: Mitel Mivoice Connect

Affected Assets

mitel
mivoice connect
≤ 22.24.1500.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References