CVE-2022-40765
Actively exploited. CVE-2022-40765 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2023-02-21) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
CSIRTS triage
- What
- The Mitel Edge Gateway component allows an authenticated attacker to execute commands within the context of the system.
- Who is affected
- Authenticated users with internal network access to MiVoice Connect.
- Urgency
- Immediate remediation is necessary as the vulnerability is actively exploited and critical in severity.
- Action
- Apply the latest security patch for MiVoice Connect.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2022-40765
Get an email if CVE-2022-40765 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 95% of all EPSS-scored CVEs.
Advisory coverage (1)
- criticalexploitedCVE-2022-40765: Mitel MiVoice Connect Command Injection Vulnerabilitycisa-kev · 2023-02-21
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2022-40765)