Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2022-40765 — Mitel MiVoice Connect Command Injection Vulnerability
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
|
Mitel | MiVoice Connect | Feb 21, 2023 | Mar 14, 2023 | Ransomware |
|
CVE-2022-41223 — Mitel MiVoice Connect Code Injection Vulnerability
The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.
|
Mitel | MiVoice Connect | Feb 21, 2023 | Mar 14, 2023 | Ransomware |
|
CVE-2022-29499 — Mitel MiVoice Connect Data Validation Vulnerability
The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
|
Mitel | MiVoice Connect | Jun 27, 2022 | Jul 18, 2022 | Ransomware |
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
MiVoice Connect · Feb 21, 2023
The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.
MiVoice Connect · Feb 21, 2023
The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
MiVoice Connect · Jun 27, 2022