CVE-2020-13617

2020-08-2618:02:00

mitre

www.cve.org

mitel

mivoice

sip phones

vulnerability

firmware

memory handling

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

55.1%

JSON

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

References

www.mitel.com/support/security-advisories

www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007