CVE-2022-29499

Published: Apr 26, 2022Modified: Jun 17, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

Affected (1)

Products: Mitel: Mivoice Connect

Mitel

1 product

Mivoice Connect

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mitel Mivoice Connect	Up to 22.20.2300.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (3)

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002

Source: cve@mitre.org

Vendor Advisory

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29499

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.