CVE-2022-41223

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 2/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

CISA Known Exploited Vulnerability

Vendor / Product Mitel — MiVoice Connect
Date Added 2023-02-21
Remediation Due 2023-03-14
Ransomware Use CONFIRMED
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008; https://nvd.nist.gov/vuln/detail/CVE-2022-41223

Bug Bounty Relevance

2 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

10.66%
Raw Score 0.106570
Percentile 95.8%
Date 2026-10-28

Intelligence Sources

kev ref →