Command Argument Injection Vulnerability in Mitel MiVoice Connect Router

CVE-2023-39288

Summary

A security flaw in the Connect Mobility Router component of Mitel MiVoice Connect up to version 9.6.2304.102 permits an authenticated user with elevated privileges, who is located within the internal network, to exploit insufficient parameter sanitization, enabling command argument injection. This vulnerability could allow attackers to gain unauthorized access to sensitive network information and potentially generate excessive traffic, disrupting normal network operations.

References