{"id":"CVE-2022-40765","aliases":[],"url":"https://o3.security/vulnerability/CVE-2022-40765","summary":"A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection…","details":"A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.","published":"2022-11-22T00:00:00.000Z","modified":"2025-10-21T23:15:31.091Z","cvss":{"score":6.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.10481,"percentile":0.95513,"asOf":"2026-09-16"},"cisaKev":{"dateAdded":"2023-02-21","dueDate":"2023-03-14","knownRansomwareCampaignUse":true},"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.mitel.com/support/security-advisories"},{"type":"WEB","url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40765"}],"provenance":{"sources":["OSV.dev","NVD","CISA KEV","FIRST.org (EPSS)"],"lastVerified":"2025-10-21T23:15:31.091Z"}}