NetSight
high8.8

CVE-2024-28066

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

Impact

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

Affected products

VendorProductAffected versions
Mitel6940w Firmware
from 1.10.4.3 before 1.11.3.0
Mitel6930w Firmware
from 1.10.4.3 before 1.11.3.0
Mitel6920w Firmware
from 1.10.4.3 before 1.11.3.0
Mitel6970 Firmware
from 1.10.4.3 before 1.11.3.0
Mitel6915 Firmware
from 1.10.4.3 before 1.11.3.0
Mitel6910 Firmware
from 1.10.4.3 before 1.11.3.0
Mitel6905 Firmware
from 1.10.4.3 before 1.11.3.0
MitelOpenscape Cp710 Firmware
from 1.10.4.3 before 1.11.3.0
MitelOpenscape Cp410 Firmware
from 1.10.4.3 before 1.11.3.0
MitelOpenscape Cp210 Firmware
from 1.10.4.3 before 1.11.3.0
MitelOpenscape Cp110 Firmware
from 1.10.4.3 before 1.11.3.0
MitelOpenscape Cpx10 Firmware
from 1.10.4.3 before 1.11.3.0

Weakness classification

References