CVE-2018-5782 in the critical feed json
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and…
published 2018-03-14 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-17549
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 18.7%
- EPSS 18.7% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.
Timeline
- Published
- First public exploit (EDB-46174)
Exploit prediction
18.72% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-46174 ShoreTel / Mitel Connect ONSITE 19.49.5200.0 - Remote Code Execution webapps, 2019-01-16
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
exploit-db.com
/exploits/46174/
exploit, third-party-advisory, vdb-entry
-
mitel.com
/support/security-advisories/mitel-product-security-advisory-18-0004
vendor-advisory
-
github.com
/twosevenzero/shoretel-mitel-rce
product, third-party-advisory
Sources
- CVE List CVE-2018-5782
- NVD CVE-2018-5782
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.