HIGH🇵🇱 Wersja polska

CVE-2024-28066

CVSS 8.8v3.1pub. 2024-04-08upd. 2025-06-18

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mitel 6905

    HW
    Mitel
    all versions

  • Mitel 6905 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 6910

    HW
    Mitel
    all versions

  • Mitel 6910 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 6915

    HW
    Mitel
    all versions

  • Mitel 6915 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 6920w

    HW
    Mitel
    all versions

  • Mitel 6920w Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 6930w

    HW
    Mitel
    all versions

  • Mitel 6930w Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 6940w

    HW
    Mitel
    all versions

  • Mitel 6940w Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 6970

    HW
    Mitel
    all versions

  • Mitel 6970 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel 700d Dect

    HW
    Mitel
    all versions

  • Mitel 700d Dect Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel Openscape Cp110

    HW
    Mitel
    all versions

  • Mitel Openscape Cp110 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel Openscape Cp210

    HW
    Mitel
    all versions

  • Mitel Openscape Cp210 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel Openscape Cp410

    HW
    Mitel
    all versions

  • Mitel Openscape Cp410 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel Openscape Cp710

    HW
    Mitel
    all versions

  • Mitel Openscape Cp710 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel Openscape Cpx10

    HW
    Mitel
    all versions

  • Mitel Openscape Cpx10 Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)

  • Mitel Openscape Dect

    HW
    Mitel
    all versions

  • Mitel Openscape Dect Firmware

    OS
    Mitel
    1.10.4.3 – 1.11.3.0 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-41710HIGH7.2⚠ KEVsame product

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Confere...

CVE-2020-13617HIGH7.5same product

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could all...

CVE-2022-29854MEDIUM6.8same product

A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, co...

CVE-2024-41713CRITICAL9.1⚠ KEVPL ✓same vendor

Path Traversal w Mitel MiCollab — nieautoryzowany dostęp do danych

CVE-2022-29499CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w komponencie Service Appliance Mitel MiVoice Connect