CVE-2022-40765CISA KEVEPSS p95.3%

CVE-2022-40765Mitel MiVoice Connect Command Injection Vulnerability

Mitel / MiVoice Connect

Description

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

Scoring

CVSS 6.8 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS10.48% probability of exploitation · percentile 95.3% · 2026-08-01T12:00:31Z
Last modified2026-06-17

CISA KEV entry

Added to KEV: 2023-02-21

(incoming)1

TypeTargetConfidenceTier
KEVEntryMitel MiVoice Connect Command Injection Vulnerabilitykev-cve-2022-407650%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Mitel MiVoice Connect Code Injection Vulnerability
CVE
Mitel MiVoice Connect Data Validation Vulnerability
CVE
Mitel SIP Phones Argument Injection Vulnerability
CVE
MiCollab, MiVoice Business Express Access Control Vulnerability
CVE
Mitel MiCollab Path Traversal Vulnerability
CVE
CVE-2025-28231
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.