{"api_version":"1","generated_at":"2026-07-23T12:46:35+00:00","cve":"CVE-2022-29499","urls":{"html":"https://cve.report/CVE-2022-29499","api":"https://cve.report/api/cve/CVE-2022-29499.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-29499","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-29499"},"summary":{"title":"Mitel MiVoice Connect Data Validation Vulnerability","description":"The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2022-04-26 02:15:00","updated_at":"2022-05-05 18:25:00"},"problem_types":["CWE-20"],"metrics":[],"references":[{"url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002","name":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002","refsource":"CONFIRM","tags":[],"title":"Mitel Product Security Advisory 22-0002","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29499","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29499","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"29499","vulnerable":"1","versionEndIncluding":"22.20.2300.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mitel","cpe5":"mivoice_connect","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":{"cve_year":"2022","cve_id":"29499","cve":"CVE-2022-29499","vendorProject":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Data Validation Vulnerability","dateAdded":"2022-06-27","shortDescription":"The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.","requiredAction":"Apply updates per vendor instructions.","dueDate":"2022-07-18","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-29499","cwes":"CWE-20","catalogVersion":"2026.07.22","updated_at":"2026-07-22 20:07:15"},"epss":{"cve_year":"2022","cve_id":"29499","cve":"CVE-2022-29499","epss":"0.565560000","percentile":"0.989600000","score_date":"2026-07-22","updated_at":"2026-07-23 00:09:33"},"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2022-29499","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"refsource":"CONFIRM","name":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002","url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0002"}]}},"nvd":{"publishedDate":"2022-04-26 02:15:00","lastModifiedDate":"2022-05-05 18:25:00","problem_types":["CWE-20"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10},"severity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mitel:mivoice_connect:*:*:*:*:*:*:*:*","versionEndIncluding":"22.20.2300.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}