CVE:CVE-2022-26143
CNNVD:CNNVD-202203-850
Mitel Networks MiCollab和Mitel Networks MiVoice Business Express都是加拿大Mitel Networks公司的产品。Mitel Networks MiCollab是一款为员工提供语音、视频、消息、音频会议和团队协作的移动应用程序。Mitel Networks MiVoice Business Express是一套实时通信解决方案。
Mitel MiCollab 9.4 SP1 FP1 之前版本和 MiVoice Business Express 8.1 版本及之前版本的TP-240 (aka tp240dvr) 模块存在安全漏洞，该漏洞允许远程攻击者获取敏感信息，从而导致拒绝服务。
solution:Upgrade mitel micollab to a higher version than 9.4,9.4,9.4:sp1,and avoid the version (,9.4),9.4,9.4:sp1; Upgrade mitel mivoice_business_express to a higher version than 8.1,and avoid the version (,8.1]