Mutare Security Advisories
Mutare is committed to delivering secure reliable products and offerings. However, Mutare recognizes that security vulnerabilities will be identified after a product is launched. These security advisories strive to provide customers with timely information, guidance, and mitigation options to minimize risks associated with security vulnerabilities.
You may contact Mutare support with any questions or clarifications.
Phone: 855.782.3890
Email: help@mutare.com
Web Query: click here
Reporting a Security Vulnerability
Mutare welcomes reports of suspected security vulnerabilities in Mutare products, services, and websites from customers, partners, and independent security researchers.
How to report
Email security@mutare.com and include:
- the product, service, or URL affected, and the version if known
- a description of the issue and its potential impact
- steps to reproduce, including any proof of concept
- how to reach you, if you would like us to follow up
Please do not include customer data, personal information, or protected health information in your report. If you need to share sensitive technical details, tell us in your first message and we will arrange a secure channel.
What to expect
- We will acknowledge your report within 5 business days.
- We will validate the issue, assess its severity using the Common Vulnerability Scoring System (CVSS), and keep you informed of our progress.
- Confirmed vulnerabilities are remediated according to severity. Where customers need to take action or be informed, we publish an advisory on this page.
- We ask that you allow us reasonable time to address the issue before any public disclosure, and we will coordinate the timing of disclosure with you.
Guidelines for researchers
When investigating, please:
- test only systems you own or are authorized to test
- do not access, modify, or retain data that does not belong to you
- do not disrupt or degrade service, including through denial-of-service testing
- do not use social engineering, phishing, or physical attacks against Mutare personnel or facilities
Mutare will not pursue legal action against researchers who report in good faith and follow these guidelines.
Mutare does not currently offer a bug bounty or monetary rewards.
Customers with questions about a published advisory or a product issue can contact Mutare Support at 855.782.3890 or help@mutare.com. To request review of how a phone number is classified by Voice Traffic Filter, please use our Phone Number Redress Request instead.
| ID | Description | Severity | Product | Version | Published |
| MUTARE-2022-001 | PwnKit: Local Privilege Escalation Vulnerability | Info | Voice Traffic Filter, formerly Voice Spam Filter, On-premise giSTT Appliance, Mutare Voice Call Completion | All | 1/28/22 |
| MUTARE-2021-007 | Apache Log4j Vulnerability | Info | None | NA | 12/13/21 |
| MUTARE-2021-006 | License checker tool reveals custom hash | Low | Mutare Voice (EVM) | 3.0.0-3.3.7 | 2/5/2021 |
| MUTARE-2021-005 | Cross-site scripting (XSS) vulnerability in admin.asp page | Medium | Mutare Voice (EVM) | 3.0.0-3.3.7 | 2/5/2021 |
| MUTARE-2021-004 | Password visible to administrator users via web portal | High | Mutare Voice (EVM) | 3.0.0-3.3.7 | 2/5/2021 |
| MUTARE-2021-003 | Utility allows extract of data tables | High | Mutare Voice (EVM) | 3.2.6-3.3.7 | 2/5/2021 |
| MUTARE-2021-002 | SQL injection | Critical | Mutare Voice (EVM) | 3.0.0-3.3.7 | 2/5/2021 |
| MUTARE-2021-001 | Unauthenticated local file inclusion to remote code execution | Critical | Mutare Voice (EVM) | 3.0.0-3.3.7 | 2/5/2021 |
