Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-31784

EPSS 1.67% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-31784

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker (that has network access to the management interface) to conduct a buffer overflow attack due to insufficient validation of URL parameters. A successful exploit could allow arbitrary code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mitel MiVoice Business Express 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mitel MiVoice Business Express是加拿大Mitel公司的一套实时通信解决方案。 Mitel MiVoice Business 9.3 PR1 版本及之前版本和MiVoice Business Express 8.0 SP3 PR3 版本及之前版本存在安全漏洞,该漏洞源于URL的参数验证不足。未经身份验证的攻击者利用该漏洞可以进行缓冲区溢出攻击并最终实现任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-31784

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-31784

登录查看更多情报信息。

Same Patch Batch · n/a · 2022-06-17 · 38 CVEs total

CVE-2022-258527.5 HIGHDenial of Service (DoS)
CVE-2022-221387.5 HIGHDenial of Service (DoS)
CVE-2022-212137.5 HIGHPrototype Pollution
CVE-2022-253457.5 HIGHDenial of Service (DoS)
CVE-2022-258567.5 HIGHDirectory Traversal
CVE-2022-339157.0 HIGHAmazon AWS 竞争条件问题漏洞
CVE-2022-258715.9 MEDIUMPrototype Pollution
CVE-2022-258725.3 MEDIUMOut-of-bounds Read
CVE-2019-12353ZZCMS SQL注入漏洞
CVE-2022-33912CheckMK Raw Edition 安全漏洞
CVE-2019-12354ZZCMS SQL注入漏洞
CVE-2019-12355ZZCMS SQL注入漏洞
CVE-2019-12356ZZCMS SQL注入漏洞
CVE-2019-12357ZZCMS SQL注入漏洞
CVE-2019-12358ZZCMS SQL注入漏洞
CVE-2019-12359ZZCMS SQL注入漏洞
CVE-2021-45026ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 跨站脚本漏洞
CVE-2021-45025ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 安全漏洞
CVE-2021-45024ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 代码问题漏洞
CVE-2022-32276Grafana 授权问题漏洞

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-31784

No comments yet


Leave a comment