VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 2, 2019· Updated Jun 17, 2026

CVE-2018-19275

CVE-2018-19275

Description

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Mitel/Cmg Suite4 versions
    cpe:2.3:a:mitel:cmg_suite:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:mitel:cmg_suite:*:*:*:*:*:*:*:*range: <8.4
    • cpe:2.3:a:mitel:cmg_suite:8.4:-:*:*:*:*:*:*
    • cpe:2.3:a:mitel:cmg_suite:8.4:sp2:*:*:*:*:*:*
    • (no CPE)range: <8.4 SP3
  • Mitel/InAttend5 versions
    cpe:2.3:a:mitel:inattend:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mitel:inattend:*:*:*:*:*:*:*:*range: <2.5
    • cpe:2.3:a:mitel:inattend:2.5:-:*:*:*:*:*:*
    • cpe:2.3:a:mitel:inattend:2.5:sp1:*:*:*:*:*:*
    • cpe:2.3:a:mitel:inattend:2.5:sp2:*:*:*:*:*:*
    • (no CPE)range: <2.5 SP3
  • Mitel/BluStarllm-create
    Range: <2.5 SP3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.