CVE-2022-29855

🗓️ 11 May 2022 19:12:48Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 137 Views

Mitel 6800/6900 Series SIP phone devices through 2022-04-27 have undocumented functionality

Reporter	Title	Published	Views	Family All 15
0day.today	Mitel 6800/6900 Series SIP Phones Backdoor Access Vulnerability	21 Jun 202200:00	–	zdt
ATTACKERKB	CVE-2022-29855	11 May 202220:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogramming software used in Mitel 6800 Series SIP Phones and 6900 Series SIP Phones lies in the presence of undocumented configuration commands. This allows a malicious actor to execute arbitrary code with root privileges, as well as gain unauthorized access to protected information.	22 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-29855	12 May 202200:34	–	circl
CNNVD	Mitel 6900 SIP 安全漏洞	4 May 202200:00	–	cnnvd
Cvelist	CVE-2022-29855	11 May 202219:12	–	cvelist
EUVD	EUVD-2022-34173	3 Oct 202520:07	–	euvd
NVD	CVE-2022-29855	11 May 202220:15	–	nvd
OSV	CVE-2022-29855	11 May 202220:15	–	osv
Packet Storm	Mitel 6800/6900 Series SIP Phones Backdoor Access	20 Jun 202200:00	–	packetstorm

NVD

Node

AND

mitel 6873i_sip_firmwareRange<5.1.0.8017

mitel 6873i_sip_firmwareRange6.0.0.368–6.1.0.171

mitel 6873i_sipMatch-

Node

AND

mitel 6930_sip_firmwareRange<5.1.0.8017

mitel 6930_sip_firmwareRange6.0.0.368–6.1.0.171

mitel 6930_sipMatch-

Node

AND

mitel 6940_sip_firmwareRange<5.1.0.8017

mitel 6940_sip_firmwareRange6.0.0.368–6.1.0.171

mitel 6940_sipMatch-

Node

AND

mitel 6865i_sip_firmwareRange<5.1.0.8017

mitel 6865i_sip_firmwareRange6.0.0.368–6.1.0.171

mitel 6865i_sipMatch-

Node

AND

mitel 6867i_sip_firmwareRange<5.1.0.8017

mitel 6867i_sip_firmwareRange6.0.0.368–6.1.0.171

mitel 6867i_sipMatch-

Node

AND

mitel 6869i_sip_firmwareRange<5.1.0.8017

mitel 6869i_sip_firmwareRange6.0.0.368–6.1.0.171

mitel 6869i_sipMatch-

Node

AND

mitel 6920_sip_firmwareRange≤5.1.0.8016

mitel 6920_sip_firmwareRange6.0.0.368–6.1.0.165

mitel 6920_sipMatch-

Node

AND

mitel 6910_sip_firmwareRange≤5.1.0.8016

mitel 6910_sip_firmwareRange6.0.0.368–6.1.0.165

mitel 6910_sipMatch-

Node

AND

mitel 6905_sip_firmwareRange≤5.1.0.8016

mitel 6905_sip_firmwareRange6.0.0.368–6.1.0.165

mitel 6905_sipMatch-

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Jun/32
mitel	www.mitel.com/support/security-advisories
packetstormsecurity	www.packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.html
mitel	www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0004
syss	www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021