CVE-2024-31963
Medium
Description
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system.
SeverityMedium
CVSS6.4
Exploit probability—
Product
Mitel 6970
PublishedMay 2, 2024
First seenMay 2, 2024
Weakness typeCWE-120CWE-120
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel 6970 | v ≤ 5.1.1 SP8 | — |
| mitel 6800_series_sip_phones | v ≤ 6.3 SP3 HF4 | — |
| mitel 6900_series_sip_phones | v ≤ 6.3 SP3 HF4 | — |
| mitel 6900w_series_sip_phone | v ≤ 6.3.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.