Known vulnerabilities in MiVoice Office 400 SMB Controller

Vendor: Mitel
Software: MiVoice Office 400 SMB Controller
Software CPE: cpe:2.3:h:mitel:mivoice_office_400_smb_controller:*:*:*:*:*:*:*:*
Website: https://www.mitel.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MiVoice Office 400 SMB Controller MiVoice Office 400 SMB Controller is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78908 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39292		 CWE-89 Medium
No
No
 1.2.5.24 03.08.2023 SB2023080313
#VU78907 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-39293		 CWE-78 Low
No
No
 1.2.5.24 03.08.2023 SB2023080313