What is CVE-2023-32748?

CVE-2023-32748 is a critical-severity vulnerability in Mitel Mivoice_connect, classified under Incorrect Authorization. CVSS score: 9.8/10. Published 2023-08-14.

How severe is CVE-2023-32748?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Mitel Mivoice_connect

CVE-2023-32748

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

Vulnerability class: Broken Access Control

EPSS: 0.009 (55.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mitel Mivoice_connect
N/a — versions n/a

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

cve@mitre.org (Vendor Advisory)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-32748?: CVE-2023-32748 is a critical-severity vulnerability in Mitel Mivoice_connect, classified under Incorrect Authorization. CVSS score: 9.8/10. Published 2023-08-14.
How severe is CVE-2023-32748?: Critical severity. CVSS v3 base score is 9.8 out of 10.