Vulnerability Details : CVE-2023-31459
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because the initial installation does not enforce a password change. A successful exploit could allow an attacker to make arbitrary configuration changes and execute arbitrary commands.
Products affected by CVE-2023-31459
- cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-31459
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 38 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-31459
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.8
|
HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2023-31459
-
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.Assigned by: nvd@nist.gov (Primary)
References for CVE-2023-31459
-
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0006
Mitel Product Security Advisory 23-0006Vendor Advisory
-
https://www.mitel.com/support/security-advisories
Security AdvisoriesVendor Advisory
Jump to