The Patching Friars' AlmanacA calendar of CVE saints

Feast day March 8

T TP240PhoneHome CVE-2022-26143
Provisional holy card

⬇ Download holy card: ·

Embed on your site

Saint TP240PhoneHome

Hagiography in preparation at the scriptorium.

Technical record

Disclosed on
March 8 2022
CVE
CVE-2022-26143
CVSS
9.8Actively exploited (CISA KEV)
Product
Mitel · MiCollab, MiVoice Business Express

The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.

Sources: akamai.com

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.