Mitel has patched a serious flaw in its MiVoice MX-ONE system that could let hackers gain admin access without logging in. The issue is due to weak access controls and affects versions 7.3 to 7.8 SP1. Users are urged to apply patches quickly and avoid exposing the system to the internet. No attacks have been seen yet, but similar flaws were targeted in the past.

‍