First published: Fri Aug 25 2023(Updated: )
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mitel MiVoice Connect | <=9.6.2208.101 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this Mitel MiVoice Connect vulnerability is CVE-2023-39289.
The title of this vulnerability is 'A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.1'.
The description of this vulnerability is: A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.
The severity of CVE-2023-39289 is high with a CVSS score of 7.5.
To fix the Mitel MiVoice Connect vulnerability CVE-2023-39289, Mitel recommends upgrading to the latest version of MiVoice Connect.