PT-2018-1145 · Mitel · Mitel Connect Onsite+1

Jared Mclaren · Published 2018-03-06 · Updated 2018-09-07 · CVE-2018-5781

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mitel Connect ONSITE versions R1711-PREM and earlier Mitel ST 14.2 release GA28 and earlier

Description A vulnerability in the conferencing component could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the "vendrecording.php" page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. The issue is related to incorrect code generation management, which may enable a remote attacker to inject and execute arbitrary code in the generated PHP file using specially crafted requests to the "vendrecording.php" script.

Recommendations For Mitel Connect ONSITE versions R1711-PREM and earlier, consider disabling access to the "vendrecording.php" page until a patch is available. For Mitel ST 14.2 release GA28 and earlier, restrict access to the vulnerable conferencing component to minimize the risk of exploitation.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2018-00578

CVE-2018-5781

Affected Products

Mitel Connect Onsite

Mitel St

References · 6

• https://osv.dev/vulnerability/CVE-2018-5781 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00578 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-5781 · Security Note
• https://mitel.com/mitel-product-security-advisory-18-0004 · Note
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004 · Note
• https://mitel.com/sites/default/files/Security-Bulletin-18-0004-001v1.0-2018-03-06.pdf · Note