CVE-2019-18863
Medium
Description
A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Mitel 6863i Firmware
PublishedMar 2, 2020
First seenMar 2, 2020
How to fix
Update
- mitel 6863i_firmware5.1.0.2051 or later
- mitel 6865i_firmware5.1.0.2051 or later
- mitel 6867i_firmware5.1.0.2051 or later
- mitel 6869i_firmware5.1.0.2051 or later
- mitel 6873i_firmware5.1.0.2051 or later
- mitel 6920_firmware5.1.0.2051 or later
- mitel 6930_firmware5.1.0.2051 or later
- mitel 6940_firmware5.1.0.2051 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel 6863i_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6865i_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6867i_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6869i_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6873i_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6920_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6930_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
| mitel 6940_firmware | v < 5.1.0.2051, 5.1.0.2051 | 5.1.0.2051 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.