CVE-2023-32748

critical

Description

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

References

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0004

https://www.mitel.com/support/security-advisories

Details

Source: Mitre, NVD

Published: 2023-08-14

Updated: 2023-08-22

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical