---
id: "CVE-2022-41223"
kind: "vulnerability"
aliases: ["CVE-2022-41223"]
title: "mitel mivoice connect: The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker\u2026"
severity: "high"
cvss: 6.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Mitel MiVoice Connect", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "mitel mivoice connect", "fixed": [], "affected": "<= 22.22.6100.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "mitel", "mivoice-connect", "ransomware", "self-hosted", "vendor", "voip"]
not_affected_if: ["no-internal-attacker-path", "not-running-mivoice-connect"]
published_at: "2022-11-22T01:15:32+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41223", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41223", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# mitel mivoice connect: The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker…

Mitel MiVoice Connect's Director component has a code injection flaw that lets an authenticated attacker on the internal network run code inside the application. CISA lists it as exploited in the wild, with tags pointing to ransomware use.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Mitel MiVoice Connect affected ? fixed ?
- vendor:mitel mivoice connect affected <= 22.22.6100.0 fixed ?

## Fix

Apply the Mitel update for MiVoice Connect per vendor instructions (CISA KEV required action); the exact fixed version is unknown from the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41223
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-41223

## From the sources

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_