high7.5
CVE-2020-13617
The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitiv…
Impact
The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitel | 6863 Firmware | through 5.0 Version 5.1 |
| Mitel | 6865 Firmware | through 5.0 Version 5.1 |
| Mitel | 6867 Firmware | through 5.0 Version 5.1 |
| Mitel | 6869 Firmware | through 5.0 Version 5.1 |
| Mitel | 6873 Firmware | through 5.0 Version 5.1 |
| Mitel | 6940 Firmware | through 5.0 Version 5.1 |
| Mitel | 6970 Firmware | through 5.0 Version 5.1 |
| Mitel | 6930 Firmware | through 5.0 Version 5.1 |
| Mitel | 6920 Firmware | through 5.0 Version 5.1 |
| Mitel | 6905 Firmware | through 5.0 Version 5.1 |
| Mitel | 6910 Firmware | through 5.0 Version 5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.mitel.com/support/security-advisories
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007
- https://www.mitel.com/support/security-advisories
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007