CVE-2022-29499 - The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation

Back Back to CVE browser

CRITICAL KEV

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation

Published Apr 26, 2022 ·Due Jul 18, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 55.24%

Description

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33836
Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29499
government-resourceUS Government Resource
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33836		Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29499		government-resourceUS Government Resource
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002		x_refsource_CONFIRMVendor Advisory