Security Resilience

CVE-2023-39290

Mitel Mivoice Connect ≤ 22.24.5800.0

Published
25 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 4.9
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0056 45th percentile
Risk Priority 40 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-39290 is a medium-severity an unspecified weakness vulnerability in Mitel Mivoice Connect. Its CVSS base score is 4.9 (Medium).

Operationally, ranked at the 45th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker…

more

to view system information.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-31458Same product: Mitel Mivoice Connect
CVE-2023-25598Same product: Mitel Mivoice Connect
CVE-2023-31459Same product: Mitel Mivoice Connect
CVE-2022-29499Same product: Mitel Mivoice Connect
CVE-2023-39289Same product: Mitel Mivoice Connect
CVE-2023-39287Same product: Mitel Mivoice Connect
CVE-2023-31457Same product: Mitel Mivoice Connect
CVE-2022-41223Same product: Mitel Mivoice Connect
CVE-2023-39285Same product: Mitel Mivoice Connect
CVE-2023-32748Same product: Mitel Mivoice Connect

Affected Assets

mitel
mivoice connect
≤ 22.24.5800.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References