CVE-2021-3176 - CVE House
Back to Database
Status published High CVE-2021-3176

The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client...

Vulnerability Description

The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3176

Credits & Attribution

No credits recorded in the NVD database.

References

More from mitel

View All →
CVE-2022-41326
The web conferencing component of Mitel MiCollab through 9.6.0.13 could...
Unknown 0
CVE-2022-41223
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0)...
Unknown 0
CVE-2022-40765
A vulnerability in the Edge Gateway component of Mitel MiVoice...
Unknown 0
CVE-2022-36454
A vulnerability in the MiCollab Client API of Mitel MiCollab...
Unknown 0
CVE-2022-36453
A vulnerability in the MiCollab Client API of Mitel MiCollab...
Unknown 0

Affected Vendor

Affected Software

businesscti enterprise
Vulnerable Versions:
0, 7.0

Timeline

Official Publish: January 29th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.