Mitel Mivoice Office 400 — known CVE vulnerabilities

Every CVE whose affected-product data names Mitel Mivoice Office 400, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-39292 — CVSS 9.8 (critical): A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious…
• CVE-2023-39293 — CVSS 9.8 (critical): A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a…
• CVE-2018-16226 — CVSS 6.1 (medium): A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an…