VYPR
← All advisories
Critical severity9.4NVD Advisory· Published Jan 15, 2026· Updated Jun 17, 2026

CVE-2025-67822

CVE-2025-67822

Description

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mitel/Mivoic Mx Onellm-fuzzy
    Range: 7.3 (7.3.0.0.50) - 7.8 SP1 (7.8.1.0.14)
  • Mitel/Mivoice Mx One3 versions
    cpe:2.3:a:mitel:mivoice_mx-one:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mitel:mivoice_mx-one:*:*:*:*:*:*:*:*range: >=7.3,<7.8
    • cpe:2.3:a:mitel:mivoice_mx-one:7.8:-:*:*:*:*:*:*
    • cpe:2.3:a:mitel:mivoice_mx-one:7.8:sp1:*:*:*:*:*:*
  • Mitel/Mivoicecpe-rescue

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.