HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2020-13617

CVSS 7.5v3.1pub. 2020-08-26upd. 2024-11-21

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Mitel 6863

    HW
    Mitel
    all versions

  • Mitel 6863 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6865

    HW
    Mitel
    all versions

  • Mitel 6865 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6867

    HW
    Mitel
    all versions

  • Mitel 6867 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6869

    HW
    Mitel
    all versions

  • Mitel 6869 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6873

    HW
    Mitel
    all versions

  • Mitel 6873 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6905

    HW
    Mitel
    all versions

  • Mitel 6905 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6910

    HW
    Mitel
    all versions

  • Mitel 6910 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6920

    HW
    Mitel
    all versions

  • Mitel 6920 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6930

    HW
    Mitel
    all versions

  • Mitel 6930 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6940

    HW
    Mitel
    all versions

  • Mitel 6940 Firmware

    OS
    Mitel
    5.1≤ 5.0

  • Mitel 6970

    HW
    Mitel
    all versions

  • Mitel 6970 Firmware

    OS
    Mitel
    5.1≤ 5.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2024-41710HIGH7.2⚠ KEVsame product

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Confere...

CVE-2024-28066HIGH8.8same product

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

CVE-2022-29854MEDIUM6.8same product

A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, co...

CVE-2019-18863MEDIUM5.9same product

A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series pho...

CVE-2024-41713CRITICAL9.1⚠ KEVPL ✓same vendor

Path Traversal w Mitel MiCollab — nieautoryzowany dostęp do danych