What is the CVSS score of CVE-2025-23092?

CVE-2025-23092 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Mitel OpenScape Accounting Management are affected by CVE-2025-23092?

Mitel OpenScape Accounting Management systems are vulnerable to unauthorized file uploads and command execution by authenticated administrators, potentially compromising billing systems and sensitive…

How to fix or mitigate CVE-2025-23092?

Within 24 hours: Inventory all Mitel OpenScape Accounting Management deployments and identify systems running V5 R1.1.0 or earlier; restrict administrative access to essential personnel only and enable detailed audit logging. Within 7 days: Implement network segmentation to limit lateral movement from affected systems; apply defense-in-depth controls including input validation at application layer and WAF rules blocking path traversal patterns (../, encoded variants). Within 30 days: Monitor Mitel security advisories for patch availability; conduct threat assessment of administrative account activity; prepare and test patch deployment procedures.

Mitel OpenScape Accounting Management CVE-2025-23092

EUVD-2025-18954 HIGH

Path Traversal (CWE-22)

2025-06-23 cve@mitre.org

Path Traversal

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18954

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

CVE Published

Jun 23, 2025 - 21:15 nvd

HIGH 7.2

DescriptionCVE.org

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to upload arbitrary files and execute unauthorized commands.

AnalysisAI

A path traversal vulnerability (CVSS 7.2) that allows an authenticated attacker with administrative privileges. High severity vulnerability requiring prompt remediation.