vulnerability

Mitel MiVoice Connect: CVE-2022-41223: Improper Control of Generation of Code

Try Surface Command

Back to search

Severity

CVSS

(AV:A/AC:L/Au:M/C:C/I:C/A:C)

Published

Nov 22, 2022

Added

Apr 14, 2025

Modified

Apr 15, 2025

Description

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

Solution

mitel-mivoice-connect-upgrade-latest

References

CVE-2022-41223
https://attackerkb.com/topics/CVE-2022-41223
https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report