Mitel MiVoice Connect Client 214.100.1213.0

CPE Details

Mitel MiVoice Connect Client 214.100.1213.0
mitel
mivoice_connect_client
214.100.1213.0
2020-04-20
18h11 +00:00
2021-04-15
12h27 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:mitel:mivoice_connect_client:214.100.1213.0:*:*:*:*:*:*:*

Informations

Vendor

mitel

Product

mivoice_connect_client

Version

214.100.1213.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-10377 2020-04-17 10h31 +00:00 A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.
9.8
Critical
CVE-2020-10211 2020-04-17 10h31 +00:00 A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.
9.8
Critical
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.