CVE-2020-10377

Katalog CVE

CVSS 9.8 · Critical EPSS 0,56%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada mitel mivoice connect client. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.

Rincian

Terbit di NVD

17 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 44,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mitel.com/support/security-advisories advisory vendor
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0004 advisory vendor