« Volver al listado

CVE-2018-19275

Estado: ModificadaCrítica (9.8)—

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Mitel — CMG SuiteMitel — Inattend

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-19275",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-04-02T18:29:02.177",
  "references": [
    {
      "url": "https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-advisory-19-0002",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-advisory-19-0002",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1188"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system."
    },
    {
      "lang": "es",
      "value": "El componente BluStar en InAttend de Mittel, en versiones anteriores a las 2.5 SP3; y en versiones de CMG de Mittel anteriores a la 8.4 SP3 Suite Servers, tiene una contraseña por defecto que podría permitir a los atacantes obtener acceso no autorizado y ejecutar scripts arbitrarios con un impacto potencial en la confidencialidad, integridad y disponibilidad del sistema."
    }
  ],
  "lastModified": "2026-06-17T01:49:03.483",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mitel:cmg_suite:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3775415F-6076-4FD9-A314-BB133748A98D",
              "versionEndExcluding": "8.4"
            },
            {
              "criteria": "cpe:2.3:a:mitel:cmg_suite:8.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E3A8103-58A5-46F1-93AC-6CC1089631DA"
            },
            {
              "criteria": "cpe:2.3:a:mitel:cmg_suite:8.4:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C875B40-EBA7-4D49-90CC-4C20064E2919"
            },
            {
              "criteria": "cpe:2.3:a:mitel:inattend:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECE2605E-6C71-493A-96FC-0FEDB92C1566",
              "versionEndExcluding": "2.5"
            },
            {
              "criteria": "cpe:2.3:a:mitel:inattend:2.5:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA91459A-DE0C-4EA8-BDC1-D4CBB1A53FDF"
            },
            {
              "criteria": "cpe:2.3:a:mitel:inattend:2.5:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F66119B-D3E9-4C36-ABF8-E46BB7E98707"
            },
            {
              "criteria": "cpe:2.3:a:mitel:inattend:2.5:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B70BC38-3214-4110-9F97-84EF344383AD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}