Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-41711

Aug. 13, 2024, 5:15 p.m.

Tags

cve@mitre.org
2024-08-13
CVE-2024-41711

Product(s) Impacted

Mitel 6800 Series SIP Phones

  • through R6.4.0.HF1 (R6.4.0.136)

Mitel 6900 Series SIP Phones

  • through R6.4.0.HF1 (R6.4.0.136)

Mitel 6900w Series SIP Phones

  • through R6.4.0.HF1 (R6.4.0.136)

Mitel 6970 Conference Unit

  • through R6.4.0.HF1 (R6.4.0.136)

Description

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.

Weaknesses

Date

Published: Aug. 13, 2024, 5:15 p.m.

Last Modified: Aug. 13, 2024, 5:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://www.mitel.com/ cve@mitre.org