Unrated
Mitel SIP Phones Argument Injection Vulnerability
Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Announced Group revision 1
Original source ↗CVE-2024-41710
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: kev:CVE-2024-41710
SIP Phones
Source reference: /product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2024-41710
Source reference:
/cveID
Publisher severity
No explicit severity was provided.
- Event
- #487 · Revision 1
- Added to Heist Feed
- Publisher date