CVE-2023-39287 (mivoice_connect)

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.

access argument command connect cve edge exploit gateway information injection internal internal network mitel mivoice network network access network traffic parameter privileges the edge traffic vulnerability