The Call Is Coming from Inside the House: Novel Exploit in VOIP Appliance

Originally published by CrowdStrike here. Written by Patrick Bennett, CrowdStrike. CrowdStrike Services recently performed an investigation that identified a compromised Mitel VOIP appliance as the threat actor’s entry point. The threat actor performed a novel remote code execution exploit on the Mitel appliance to gain initial access to the environment.CrowdStrike identified and reported the vulnerability to Mitel, and CVE-2022-29499 was created.The threat actor performed anti-forensic techn...

call exploit house voip