CVE-2022-26143: MiCollab, MiVoice Business Express Access Control Vulnerability
Summary: CISA's catalog lists CVE-2022-26143, an access control vulnerability in Mitel MiCollab and MiVoice Business Express that may let a malicious actor gain unauthorized access to sensitive information and services, cause performance degradations, or trigger a denial of service condition. The federal remediation due date is 2022-04-15, and known ransomware campaign use is listed as unknown.
What you should know: The flaw sits in the same Mitel systems that carry business voice and collaboration traffic, so unauthorized access there reaches sensitive information and services directly, and CISA's 2022-04-15 deadline has long since passed.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-26143Mitel
- Related
- CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability Known Exploited Vulnerabilities · Feb 12, 2025CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability Known Exploited Vulnerabilities · Jan 07, 2025CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability Known Exploited Vulnerabilities · Jan 07, 2025