Mutare develops a narrow product line centered on voice and unified communications platforms, which occupy a specialized but high-value niche in enterprise telephony and messaging infrastructure. The vendor's disclosures skew strongly toward critical-severity outcomes and recur through web-application and data-handling weakness classes including cleartext storage of sensitive information, CSRF, SQL injection, and cross-site scripting, reflecting the authentication and input-validation demands of web-facing communications software. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Mutare over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-27236CRITICAL An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution. | Feb 16, 2021 | 9.8 | 29 | NO | NO |
CVE-2021-27234CRITICAL An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Ev | Feb 16, 2021 | 9.8 | 29 | NO | NO |
CVE-2011-1104MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that (1) change a PIN, | Feb 28, 2011 | 6.8 | 22 | NO | NO |
CVE-2021-27235MEDIUM An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tab | Feb 16, 2021 | 4.9 | 18 | NO | NO |
CVE-2021-27233MEDIUM An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, password information for external systems is visible in cleartext. The S | Feb 16, 2021 | 4.9 | 18 | NO | NO |
CVE-2011-1105MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN. | Feb 28, 2011 | 4.3 | 17 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Mutare.
Media articles that mention a CVE ID that affects a product developed by Mutare — matched by CVE ID, not by vendor name.