CVE

CVE-2022-29499

P1⬤ KNOWN RANSOMWARE USE

Mitel MiVoice Connect Data Validation Vulnerability

Mitel · MiVoice Connect

Date added (CISA)

2022-06-27

Remediation due

2022-07-18

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.