CVE:CVE-2022-31784
CNNVD:CNNVD-202206-1671
Mitel MiVoice Business Express是加拿大Mitel公司的一套实时通信解决方案。
Mitel MiVoice Business 9.3 PR1 版本及之前版本和MiVoice Business Express 8.0 SP3 PR3 版本及之前版本存在安全漏洞，该漏洞源于URL的参数验证不足。未经身份验证的攻击者利用该漏洞可以进行缓冲区溢出攻击并最终实现任意代码执行。
solution:Upgrade mitel mivoice_business to a higher version than 9.3.0.27,and avoid the version (,9.3.0.27]; Upgrade mitel mivoice_business_express to a higher version than 8.1.2.801,and avoid the version (,8.1.2.801]