CVE-2024-31963

May 2, 2024, 6 p.m.

None
No Score

Description

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones, including 6970 Conference Unit, through 6.3 SP3 HF4 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to cause a denial of service.

Product(s) Impacted

Product Versions
Mitel 6800 Series and 6900 Series SIP Phones
  • 6.3 SP3 HF4 and prior
Mitel 6800 Series SIP Phones
  • 6.3 SP3 HF4
Mitel 6900 Series SIP Phones
  • 6.3 SP3 HF4
Mitel 6970 Conference Unit
  • 6.3 SP3 HF4

Weaknesses

Date

  • Published: May 2, 2024, 4:15 p.m.
  • Last Modified: May 2, 2024, 6 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.