All vulnerabilities
CVE-2022-29499 Known ransomware use
Mitel MiVoice Connect Data Validation Vulnerability
Mitel — MiVoice Connect
- Added to KEV catalog
- 27 June 2022
- Federal remediation due date
- 18 July 2022
- Weakness classification (CWE)
- CWE-20
CISA Description
The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-29499
More Mitel Vulnerabilities
CVE-2024-41710
Mitel SIP Phones Argument Injection Vulnerability
CVE-2024-55550
Mitel MiCollab Path Traversal Vulnerability
CVE-2024-41713
Mitel MiCollab Path Traversal Vulnerability
CVE-2022-41223
Mitel MiVoice Connect Code Injection Vulnerability
CVE-2022-40765
Mitel MiVoice Connect Command Injection Vulnerability
Confirm Your Exposure
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services