Huawei MiContact Center Business Information Disclosure Vulnerability (CVE-2025-27827) Advisory

Key Information Vulnerability Overview Vulnerability Name: MiContact Center Business Information Disclosure Vulnerability Advisory Number: MISA-2025-0002 CVE ID: CVE-2025-27827 CVSS 3.1 Base Score: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products Product Name: MiContact Center Business Affected Versions: - 10.2.0.0 to 10.2.0.3 - 10.1.0.3 to 10.1.0.5 - 10.0.0.4 to 10.0.0.6 - 9.5.0.3 and earlier versions Solutions and Available Patches Patch Numbers: - KB58256917 (for 10.2.0.3) - KB573775 (for 10.1.0.5) - KB569707 (for 10.0.0.6) - KB571025 (for 9.5.0.3) Vulnerability Severity Severity: High Mitigation Measures Customers should apply the provided fixes. Risk can be mitigated by disabling Legacy Chat or switching to CloudLink Contact Center Messenger Chat. Related CVEs / CWEs / Advisories Related CVE: CVE-2025-27827 Version History Version 1.0: 2025-01-22, Initial release Version 2.0: 2025-02-04, Updated affected products and solutions information Version 3.0: 2025-03-11, Updated CVE number

Goal Reached Thanks to every supporter — we hit 100%!

Huawei MiContact Center Business Information Disclosure Vulnerability (CVE-2025-27827) Advisory