Summary
Ein Angreifer kann mehrere Schwachstellen in Mitel SIP Phone ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
Product
Mitel SIP Phone bezeichnet Festnetz-Tischtelefone.
Vulnerabilities 5
-
Critical 9.1
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
-
High 7.5CVE-2024-31964 Public exploit
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
-
Medium 6.4
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
-
Medium 6.2
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
-
Medium 4.2
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…
Revision history
-
#3
PoC für CVE-2024-31964 aufgenommen
-
#2
Korrektur
-
#1
Initiale Fassung
References
-
Mitel Product Security Advisory vom 2024-04-17
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-24-0006
-
Mitel Product Security Advisory vom 2024-04-17
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-24-0007
-
Mitel Product Security Advisory vom 2024-04-17
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-24-0008
-
Mitel Product Security Advisory vom 2024-04-17
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-24-0009
-
Mitel Product Security Advisory vom 2024-04-17
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-24-0010
-
PoC CVE-2024-31964 vom 2025-07-06
https://github.com/d-Raco/CVE-2024-31964