CVE-2022-26143
MiCollab, MiVoice Business Express Access Control Vulnerability
Published Mar 10, 2022 · updated Jun 16, 2026 · mitel micollab
The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.
Timeline
Detection, updates, and resolution for this record.
Mar 10, 2022 · Catalog
Detected
The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe mitel/micollabversion unspecified
- cpe mitel/micollab9.4
- cpe mitel/mivoice business expressversion unspecified
- vendor Mitel MiCollab, MiVoice Business Expressversion unspecified
Sources
- CISA KEVCVE-2022-26143
A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.
cisa.gov - CVE.orgCVE-2022-26143
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-26143
30-day exploitation probability 87.3%
first.org - NIST NVDCVE-2022-26143
The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in
nvd.nist.gov