VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Sep 14, 2023· Updated Jun 17, 2026

CVE-2023-39285

CVE-2023-39285

Description

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modified URL, potentially enabling them to modify system configuration settings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mitel/Mivoice Connect2 versions
    cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*range: <22.24.7100.0
    • (no CPE)range: <=19.3 SP3 (22.24.5800.0)
  • Mitel/MiVoice Connectdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.