What is CVE-2020-10211?

CVE-2020-10211 is a critical-severity vulnerability in Mitel Mivoice Connect, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2020-04-17.

How severe is CVE-2020-10211?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Improper input validation in Mitel Mivoice Connect

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive information.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.030 (86.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mitel Mivoice_connect
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-10211?: CVE-2020-10211 is a critical-severity vulnerability in Mitel Mivoice Connect, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2020-04-17.
How severe is CVE-2020-10211?: Critical severity. CVSS v3 base score is 9.8 out of 10.