What is CVE-2023-39290?

CVE-2023-39290 is a medium-severity vulnerability in Mitel Mivoice Connect. CVSS score: 4.9/10. Published 2023-08-25.

How severe is CVE-2023-39290?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Mitel Mivoice Connect

CVE-2023-39290

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.

EPSS: 0.005 (38.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mitel Mivoice_connect
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-39290?: CVE-2023-39290 is a medium-severity vulnerability in Mitel Mivoice Connect. CVSS score: 4.9/10. Published 2023-08-25.
How severe is CVE-2023-39290?: Medium severity. CVSS v3 base score is 4.9 out of 10.