CVE-2023-31459

Published: May 24, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network access to authenticate with administrative privileges, because the initial installation does not enforce a password change. A successful exploit could allow an attacker to make arbitrary configuration changes and execute arbitrary commands.

Affected (1)

Products: Mitel: Mivoice Connect

1 product

Mivoice Connect

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mitel Mivoice Connect	Up to 9.6.2208.101

Related CWEs

Weak Password Recovery Mechanism for Forgotten Password

The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

References (4)

https://www.mitel.com/support/security-advisories

Source: cve@mitre.org

Vendor Advisory

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0006

Source: cve@mitre.org

Vendor Advisory

https://www.mitel.com/support/security-advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0006

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.