10

CVE-2018-19275

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.

Data is provided by the National Vulnerability Database (NVD)
Mitel ≫ Cmg Suite Version < 8.4
Mitel ≫ Cmg Suite Version8.4 Update-
Mitel ≫ Cmg Suite Version8.4 Updatesp2
Mitel ≫ Inattend Version < 2.5
Mitel ≫ Inattend Version2.5 Update-
Mitel ≫ Inattend Version2.5 Updatesp1
Mitel ≫ Inattend Version2.5 Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.1% 0.856
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-1188 Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.