Authorization Bypass in Mitel MiVoice Connect Router

CVE-2023-31459

Summary

A vulnerability exists in the Connect Mobility Router component of Mitel's MiVoice Connect. Versions 9.6.2208.101 and earlier are susceptible to an authorization bypass. The flaw allows an unauthenticated attacker with access to the internal network to gain administrative privileges due to the initial installation's failure to enforce a mandatory password change. Exploiting this vulnerability potentially grants the attacker the ability to execute arbitrary commands and change crucial system configurations.

References