Mitel MiVoice Office 400 vulnerabilities
5 known vulnerabilities in Mitel MiVoice Office 400 from Mitel. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.4 High severity
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute…
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → S
- 8.4 High severity
Mitel MiVoice Office 400: Path Traversal: 'dir....filename'
This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, un
- 8.4 High severity
Mitel MiVoice Office 400: External Control of File Name or Path
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying t
- 8.5 High severity
Mitel MiVoice Office 400: Improper Limitation of a Pathname to a Restricted Directory
DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the ba
- 8.4 High severity
Mitel MiVoice Office 400: Path Traversal: 'dir....filename'
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs