Cyber Resilience

CVE-2023-31458

Mitel Mivoice Connect ≤ 22.24.1500.0

Published
24 May 2023
Modified
31 January 2025
Patch / advisory
View advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0092 57th percentile
Risk Priority 73 floored blend · peak EPSS

Summary

CVE-2023-31458 is a critical-severity an unspecified weakness vulnerability in Mitel Mivoice Connect. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 43% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because initial installation does not enforce a password change.…

more

A successful exploit could allow an attacker to make arbitrary configuration changes and execute arbitrary commands.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-39285Same product: Mitel Mivoice Connect
CVE-2023-39288Same product: Mitel Mivoice Connect
CVE-2023-39289Same product: Mitel Mivoice Connect
CVE-2023-31460Same product: Mitel Mivoice Connect
CVE-2023-25598Same product: Mitel Mivoice Connect
CVE-2022-41223Same product: Mitel Mivoice Connect
CVE-2023-31459Same product: Mitel Mivoice Connect
CVE-2022-40765Same product: Mitel Mivoice Connect
CVE-2023-39287Same product: Mitel Mivoice Connect
CVE-2023-31457Same product: Mitel Mivoice Connect

Affected Assets

mitel
mivoice connect
≤ 22.24.1500.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References