What’s Vulnerable › Vulnerabilities

CVE-2021-3176

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-29 · updated 2026-06-17
• Weakness: CWE-20

Description

The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.

Affected products

• Mitel Businesscti Enterprise: before 6.4.15; from 7.0 before 7.1.2 — fixed in 6.4.15, 7.1.2

How to fix

Upgrade to a fixed version: Mitel Businesscti Enterprise 6.4.15, 7.1.2. Check the vendor advisory for mitigations.

References

• https://www.mitel.com/support/security-advisories
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001
• https://www.mitel.com/support/security-advisories
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001

Get alerted when CVE-2021-3176 or the next vulnerability affects your stack