PT-2026-3135 · Mitel · Mitel Mivoice Mx-One

Published 2026-01-15 · Updated 2026-01-17 · CVE-2025-67822

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mitel MiVoice MX-ONE versions 7.3.0.0.50 through 7.8.1.0.14

Description A flaw exists in the Provisioning Manager component that allows an unauthenticated attacker to bypass authentication. A successful exploit could grant unauthorized access to user or admin accounts within the system.

Recommendations Update Mitel MiVoice MX-ONE to a version later than 7.8.1.0.14. Update Mitel MiVoice MX-ONE to a version later than 7.3.0.0.50.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-67822

Affected Products

Mitel Mivoice Mx-One

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-67822 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67822 · Vendor Advisory
• https://mitel.com/support/security-advisories · Vendor Advisory
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0009 · Vendor Advisory
• https://twitter.com/CVEnew/status/2012490394232139933 · Twitter Post
• https://twitter.com/TheHackerWire/status/2012194307311333528 · Twitter Post