PT-2026-3135 · Mitel · Mitel Mivoice Mx-One
CVE-2025-67822
·
Publicado
2026-01-15
·
Atualizado
2026-01-17
CVSS v3.1
9.4
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Mitel MiVoice MX-ONE versions 7.3.0.0.50 through 7.8.1.0.14
Description
A flaw exists in the Provisioning Manager component that allows an unauthenticated attacker to bypass authentication. A successful exploit could grant unauthorized access to user or admin accounts within the system.
Recommendations
Update Mitel MiVoice MX-ONE to a version later than 7.8.1.0.14.
Update Mitel MiVoice MX-ONE to a version later than 7.3.0.0.50.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mitel Mivoice Mx-One