Mutare Security Advisories

Mutare is committed to delivering secure reliable products and offerings. However, Mutare recognizes that security vulnerabilities will be identified after a product is launched. These security advisories strive to provide customers with timely information, guidance, and mitigation options to minimize risks associated with security vulnerabilities.

You may contact Mutare support with any questions or clarifications.

Phone: 855.782.3890

Email: help@mutare.com

Web Query: click here

Reporting a Security Vulnerability

Mutare welcomes reports of suspected security vulnerabilities in Mutare products, services, and websites from customers, partners, and independent security researchers.

How to report

Email security@mutare.com and include:

  • the product, service, or URL affected, and the version if known
  • a description of the issue and its potential impact
  • steps to reproduce, including any proof of concept
  • how to reach you, if you would like us to follow up

Please do not include customer data, personal information, or protected health information in your report. If you need to share sensitive technical details, tell us in your first message and we will arrange a secure channel.

What to expect

  • We will acknowledge your report within 5 business days.
  • We will validate the issue, assess its severity using the Common Vulnerability Scoring System (CVSS), and keep you informed of our progress.
  • Confirmed vulnerabilities are remediated according to severity. Where customers need to take action or be informed, we publish an advisory on this page.
  • We ask that you allow us reasonable time to address the issue before any public disclosure, and we will coordinate the timing of disclosure with you.

Guidelines for researchers

When investigating, please:

  • test only systems you own or are authorized to test
  • do not access, modify, or retain data that does not belong to you
  • do not disrupt or degrade service, including through denial-of-service testing
  • do not use social engineering, phishing, or physical attacks against Mutare personnel or facilities

Mutare will not pursue legal action against researchers who report in good faith and follow these guidelines.

Mutare does not currently offer a bug bounty or monetary rewards.

Customers with questions about a published advisory or a product issue can contact Mutare Support at 855.782.3890 or help@mutare.com. To request review of how a phone number is classified by Voice Traffic Filter, please use our Phone Number Redress Request instead.

IDDescriptionSeverityProductVersionPublished
MUTARE-2022-001PwnKit: Local Privilege Escalation VulnerabilityInfoVoice Traffic Filter, formerly Voice Spam Filter, On-premise giSTT Appliance, Mutare Voice Call CompletionAll1/28/22
MUTARE-2021-007Apache Log4j VulnerabilityInfoNoneNA12/13/21
MUTARE-2021-006License checker tool reveals custom hashLowMutare Voice (EVM)3.0.0-3.3.72/5/2021
MUTARE-2021-005Cross-site scripting (XSS) vulnerability in admin.asp pageMediumMutare Voice (EVM)3.0.0-3.3.72/5/2021
MUTARE-2021-004Password visible to administrator users via web portalHighMutare Voice (EVM)3.0.0-3.3.72/5/2021
MUTARE-2021-003Utility allows extract of data tablesHighMutare Voice (EVM)3.2.6-3.3.72/5/2021
MUTARE-2021-002SQL injectionCriticalMutare Voice (EVM)3.0.0-3.3.72/5/2021
MUTARE-2021-001Unauthenticated local file inclusion to remote code executionCriticalMutare Voice (EVM)3.0.0-3.3.72/5/2021