CVE-2023-39293

Summary

CVE-2023-39293 is a critical Command Injection vulnerability affecting the MiVoice Office 400 SMB Controller versions prior to 1.2.5.24. This issue allows malicious actors to inject and execute arbitrary commands within the system context, potentially leading to serious security compromises. Successful exploitation could result in unauthorized access, data theft, or system damage. Users are strongly urged to update their controllers to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.