CVE-2024-31964
High
Description
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication control. A successful exploit could allow an attacker to modify system configuration settings and potentially cause a denial of service.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Mitel 6900w Series Sip Phone
PublishedMay 2, 2024
First seenMay 2, 2024
Weakness typeCWE-284Improper access control
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel 6900w_series_sip_phone | v ≤ 6.3.3 | — |
| mitel 6970_conference_unit | v ≤ Version 5.1.1 SP8 | — |
| mitel 6800_series_sip_phones | v ≤ 6.3 SP3 HF4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.