CVE-2023-39290

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-392914.9A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with CVE-2023-392929.8A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious acCVE-2023-392939.8A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a maliciouCVE-2023-392947.2An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coCVE-2023-392958.8An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users tCVE-2023-392967.5A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coulCVE-2023-392978.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coCVE-2023-392987.8A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coCVE-2023-392997.5A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contCVE-2023-393007.2An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated admiCVE-2023-393014.3A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulCVE-2023-393027.2An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co
CVE-2023-39290: Medium severity, CVSS 4.9 | Vulnix