CyberSec.Space Logo
Back to CVE Browser

CVE-2022-29499

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-04-26
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

Affected Platforms (CPE)

📦
Mitel

Mivoice Connect

<= 22.20.2300.0

References & Advisories

🔗 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002
🔗 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29499

Related Vulnerabilities

CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

CVE-2026-645247.7

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback ...

CVE-2026-64478

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: avoid kobject path lookup in DualSense match...

CVE-2026-644599.8

In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Commit ...