Mitel MiVoice MX-ONE Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Provisioning Manager component of Mitel MiVoice MX-ONE versions 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14). This vulnerability allows an unauthenticated attacker to bypass authentication mechanisms, potentially leading to unauthorized access to user or admin accounts on the system.

Impact

Exploitation of this vulnerability could result in unauthorized access to user or admin accounts within the system.

Remediation

Mitel has provided patches MXO-15711_78SP0 and MXO-15711_78SP1 for MiVoice MX-ONE versions 7.8 and 7.8 SP1, respectively. For MiVoice MX-ONE version 7.3 and above, patch requests can be submitted to an authorized service partner. Patches are available at Mitel's discretion.