Arbitrary Script Execution Vulnerability in Mitel MiVoice Connect Linux DVS Server

Arbitrary Script Execution Vulnerability in Mitel MiVoice Connect Linux DVS Server

CVE-2023-32748 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.