CVE-2024-31967
Critical
Description
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A successful exploit could allow an attacker to gain unauthorized access to user information or the system configuration.
SeverityCritical
CVSS9.1
Exploit probability—
Product
Mitel 6800 Series Sip Phones
PublishedMay 2, 2024
First seenMay 2, 2024
Weakness typeCWE-284Improper access control
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel 6800_series_sip_phones | v ≤ 6.3 | — |
| mitel 6900_series_sip_phones | v ≤ 6.3.3 | — |
| mitel 6970_conference_unit | v ≤ 5.1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.