high8.1
CVE-2020-27639
The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth…
Impact
The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mitel | 6873i Sip Firmware | before 5.1.0 Version 5.1.0 |
| Mitel | 6930 Sip Firmware | before 5.1.0 Version 5.1.0 |
| Mitel | 6940 Sip Firmware | before 5.1.0 Version 5.1.0 |