CVE:CVE-2020-10377
CNNVD:CNNVD-202004-1441
Mitel Networks MiVoice Connect Client是加拿大Mitel Networks公司的一款用于集中管理Mitel Networks的呼叫处理和协作工具的客户端程序。
Mitel Networks MiVoice Connect Client 214.100.1214.0之前版本中存在安全漏洞，该漏洞源于程序使用弱加密方式。攻击者可利用该漏洞获取用户凭证，访问系统。
solution:Upgrade mitel mivoice_connect to a higher version than 19.1,and avoid the version (,19.1]; Upgrade mitel mivoice_connect_client to a higher version than 214.100.1213.0,and avoid the version (,214.100.1213.0]