Security Resilience

CVE-2023-31458

Mitel Mivoice Connect ≤ 22.24.1500.0

Published
24 May 2023
Modified
31 January 2025
Patch / advisory
View advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0092 60th percentile
Risk Priority 73 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-31458 is a critical-severity an unspecified weakness vulnerability in Mitel Mivoice Connect. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 40% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change.…

more

A successful exploit could allow an attacker to make arbitrary configuration changes and execute arbitrary commands.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-25598Same product: Mitel Mivoice Connect
CVE-2023-31459Same product: Mitel Mivoice Connect
CVE-2022-29499Same product: Mitel Mivoice Connect
CVE-2023-39289Same product: Mitel Mivoice Connect
CVE-2023-39287Same product: Mitel Mivoice Connect
CVE-2023-31457Same product: Mitel Mivoice Connect
CVE-2022-41223Same product: Mitel Mivoice Connect
CVE-2023-39285Same product: Mitel Mivoice Connect
CVE-2023-32748Same product: Mitel Mivoice Connect
CVE-2022-40765Same product: Mitel Mivoice Connect

Affected Assets

mitel
mivoice connect
≤ 22.24.1500.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References