Mitel: exploited vulnerabilities
- 7exploited vulnerabilities
- 5used by ransomware
- Feb 12, 2025latest one added
- MiVoice Connect 3
- MiCollab 2
- SIP Phones 1
- MiCollab, MiVoice Business Express 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Feb 12, 2025 | Argument Injection | SIP Phones | Medium 6.8 | 42% |
| Jan 7, 2025 | Path Traversal | MiCollab | Medium 4.4 | 38% |
| Jan 7, 2025 | Path Traversal | MiCollab | Critical 9.1 | 97% |
| Feb 21, 2023 | Code Injection | MiVoice Connect | Medium 6.8 | 11% |
| Feb 21, 2023 | Command Injection | MiVoice Connect | Medium 6.8 | 11% |
| Jun 27, 2022 | Data Validation | MiVoice Connect | Critical 9.8 | 55% |
| Mar 25, 2022 | Access Control | MiCollab, MiVoice Business Express | Critical 9.8 | 87% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.