Mitel MiVoice Connect Client vulnerabilities

2 CVEs affecting Mitel MiVoice Connect Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12456, published 2020-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-12456, published 2020-08-26. High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days. A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper…
CVE-2020-10377, published 2020-04-17. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an…