PT-2020-12047 · Mitel · Mitel Mivoice Connect Client

Daniel Wetherill · Published 2020-04-17 · Updated 2025-11-03 · CVE-2020-10377

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect Client versions prior to 214.100.1214.0

Description A weak encryption issue could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.

Recommendations For versions prior to 214.100.1214.0, update to version 214.100.1214.0 or later to resolve the issue.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2020-10377

Affected Products

Mitel Mivoice Connect Client

References · 6

• https://osv.dev/vulnerability/CVE-2020-10377 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10377 · Security Note
• https://mitel.com/support/security-advisories · Vendor Advisory
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-20-0004 · Vendor Advisory
• https://t.me/cveNotify/141396 · Telegram Post
• https://t.me/cvenotify/2870 · Telegram Post