What is CVE-2021-3176?

CVE-2021-3176 is a high-severity vulnerability in Mitel Businesscti Enterprise, classified under Improper Input Validation. CVSS score: 8.0/10. Published 2021-01-29.

How severe is CVE-2021-3176?

High severity. CVSS v3 base score is 8.0 out of 10.

Improper input validation in Mitel Businesscti Enterprise

CVE-2021-3176

The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.009 (55.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Mitel Businesscti_enterprise
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-3176?: CVE-2021-3176 is a high-severity vulnerability in Mitel Businesscti Enterprise, classified under Improper Input Validation. CVSS score: 8.0/10. Published 2021-01-29.
How severe is CVE-2021-3176?: High severity. CVSS v3 base score is 8.0 out of 10.