mivoice_office_400 vulnerabilities
2 known vulnerabilities in mivoice_office_400 from Mitel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
mivoice_office_400: Improper Neutralization of Special Elements used in a Command
A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.
- 9.8 Critical severity
mivoice_office_400: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.