Read the docs

Mitel

Records142All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical36CVSS 9.0–10.0
CVSS high41CVSS 7.0–8.9

Exploited now

Mitel records in CISA KEV
TI-2024-27770 Mitel SIP Phones Argument Injection Vulnerability Priority CRITICAL 91KEV 2025-02-12TI-2024-27773 Mitel MiCollab Path Traversal Vulnerability Priority CRITICAL 98KEV 2025-01-07TI-2024-36877 Mitel MiCollab Path Traversal Vulnerability Priority HIGH 78KEV 2025-01-07TI-2022-19391 Mitel MiVoice Connect Command Injection Vulnerability Priority CRITICAL 89KEV 2023-02-21TI-2022-19733 Mitel MiVoice Connect Code Injection Vulnerability Priority CRITICAL 89KEV 2023-02-21TI-2022-11960 Mitel MiVoice Connect Data Validation Vulnerability Priority CRITICAL 100KEV 2022-06-27

Components

Products in the NVD configurations · select one to filter the records
Micollab 48 records CRITICAL Mivoice Connect 23 records CRITICAL Micontact Center Business 11 records MEDIUM Connect Onsite 7 records MEDIUM Micollab Audio, Web & Video Conferencing 6 records MEDIUM St14.2 6 records MEDIUM Micloud Management Portal 5 records MEDIUM 6869i Sip Firmware 4 records CRITICAL

Records

4 records in 6869i Sip Firmware · all components

TI-2024-27770 CVE-2024-41710 · GHSA-w287-4mr4-4v3v

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones…

Priority CRITICAL 91KEV

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.41646 Published 2024-08-12 No fix listed CWE-88
TI-2024-25070 CVE-2024-37570 · GHSA-683h-wmfw-2p2m

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not…

Priority HIGH 79

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (sent by an authenticated user) before appending flags to the busybox ftpg…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0106 Published 2024-06-09 No fix listed CWE-77
TI-2022-12215 CVE-2022-29855 · GHSA-4f6f-x4m3-rhqj

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented…

Priority LOW 31

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00789 Published 2022-05-11 No fix listed
Open these records in search →