CVE-2018-19275
Critical
Description
The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Mitel Inattend
PublishedApr 2, 2019
First seenApr 2, 2019
How to fix
Update
- mitel inattend2.5 or later
- mitel cmg_suite8.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel inattend | v < 2.5, 2.5 | 2.5 |
| mitel cmg_suite | v < 8.4, 8.4 | 8.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.