CVE-2023-31460 (mivoice_connect)

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters.

access attack command command injection connect cve injection injection attack internal internal network mivoice mobility network network access router url vulnerability