CVE-2018-19275: Critical severity Mitel Cmg Suite vulnerability
The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19275?
CVE-2018-19275 is considered to have a high severity due to the risk of unauthorized access and potential impact to system confidentiality, integrity, and availability.
How do I fix CVE-2018-19275?
To fix CVE-2018-19275, change the default password used by the BluStar component in Mitel InAttend and CMG Suite to a strong, unique password.
What systems are affected by CVE-2018-19275?
CVE-2018-19275 affects Mitel InAttend versions prior to 2.5 SP3 and CMG Suite versions prior to 8.4 SP3.
What could happen if CVE-2018-19275 is exploited?
If exploited, CVE-2018-19275 could allow remote attackers to gain unauthorized access and execute arbitrary scripts on the affected systems.
Is there a workaround for CVE-2018-19275?
The primary workaround for CVE-2018-19275 is to immediately change any default passwords configured in the affected Mitel products.