H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2022-40765

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

Vulnerability
TypeVulnerability
External ID—
First seen2023-02-21
Last seen2023-02-21

Confidence

—

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMitel MiVoice Connect
Added2023-02-21
Due date2023-03-14
9 recorded

Relationships

mitigates
from Remediate CVE-2022-40765
Mitigation
related-to
to Command Delimiters
Technique
related-to
to Command Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to IMAP/SMTP Command Injection
Technique
related-to
to LDAP Injection
Technique
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Manipulating Writeable Configuration Files
Technique
related-to
to Manipulating Writeable Terminal Devices
Technique
2 external

References

nvd
CVE-2022-40765
open
cwe
CWE-77
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance