Lucene search

[email protected]CVE-2019-18863

HistoryMar 02, 2020 - 6:15 p.m.

CVE-2019-18863

2020-03-0218:15:10

CWE-326

[email protected]

web.nvd.nist.gov

cve-2019-18863

mitel

srtp

sip

vulnerability

implementation

128-bit key

man-in-the-middle attack

exploit

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.

Affected configurations

NVD

Node

mitel6863i_firmwareRange<5.1.0.2051

mitel6863i_firmwareMatch5.1.0.2051-

mitel6863i_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6863iMatch-

Node

mitel6865i_firmwareRange<5.1.0.2051

mitel6865i_firmwareMatch5.1.0.2051-

mitel6865i_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6865iMatch-

Node

mitel6867i_firmwareRange<5.1.0.2051

mitel6867i_firmwareMatch5.1.0.2051-

mitel6867i_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6867iMatch-

Node

mitel6869i_firmwareRange<5.1.0.2051

mitel6869i_firmwareMatch5.1.0.2051-

mitel6869i_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6869iMatch-

Node

mitel6873i_firmwareRange<5.1.0.2051

mitel6873i_firmwareMatch5.1.0.2051-

mitel6873i_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6873iMatch-

Node

mitel6920_firmwareRange<5.1.0.2051

mitel6920_firmwareMatch5.1.0.2051-

mitel6920_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6920Match-

Node

mitel6930_firmwareRange<5.1.0.2051

mitel6930_firmwareMatch5.1.0.2051-

mitel6930_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6930Match-

Node

mitel6940_firmwareRange<5.1.0.2051

mitel6940_firmwareMatch5.1.0.2051-

mitel6940_firmwareMatch5.1.0.2051sp2_hf2

AND

mitel6940Match-

CPENameOperatorVersion
mitel:6863i_firmwaremitel 6863i firmwarelt5.1.0.2051

CPE	Name	Operator	Version
mitel:6863i_firmware	mitel 6863i firmware	lt	5.1.0.2051

References

www.mitel.com/support/security-advisories

www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

Related for CVE-2019-18863

prion1 cvelist1 nvd1