Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Priority CRITICAL 91KEV

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.41646 Published 2024-08-12 No fix listed CWE-88
Priority HIGH 79

On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (sent by an authenticated user) before appending flags to the busybox ftpg…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0106 Published 2024-06-09 No fix listed CWE-77
Priority LOW 31

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00789 Published 2022-05-11 No fix listed