CVE-2022-29855

🗓️ 11 May 2022 20:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 17 Views

Mitel phone series vulnerabilit

Reporter	Title	Published	Views	Family All 14
0day.today	Mitel 6800/6900 Series SIP Phones Backdoor Access Vulnerability	21 Jun 202200:00	–	zdt
ATTACKERKB	CVE-2022-29855	11 May 202220:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogramming software used in Mitel 6800 Series SIP Phones and 6900 Series SIP Phones lies in the presence of undocumented configuration commands. This allows a malicious actor to execute arbitrary code with root privileges, as well as gain unauthorized access to protected information.	22 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-29855	12 May 202200:34	–	circl
CNNVD	Mitel 6900 SIP 安全漏洞	4 May 202200:00	–	cnnvd
CVE	CVE-2022-29855	11 May 202219:12	–	cve
Cvelist	CVE-2022-29855	11 May 202219:12	–	cvelist
EUVD	EUVD-2022-34173	3 Oct 202520:07	–	euvd
Packet Storm	Mitel 6800/6900 Series SIP Phones Backdoor Access	20 Jun 202200:00	–	packetstorm
Prion	Improper access control	11 May 202220:15	–	prion

NVD

Node

mitel 6873i_sip_firmwareRange<5.1.0.8017

OR

mitel 6873i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel 6873i_sipMatch-

Node

mitel 6930_sip_firmwareRange<5.1.0.8017

OR

mitel 6930_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel 6930_sipMatch-

Node

mitel 6940_sip_firmwareRange<5.1.0.8017

OR

mitel 6940_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel 6940_sipMatch-

Node

mitel 6865i_sip_firmwareRange<5.1.0.8017

OR

mitel 6865i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel 6865i_sipMatch-

Node

mitel 6867i_sip_firmwareRange<5.1.0.8017

OR

mitel 6867i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel 6867i_sipMatch-

Node

mitel 6869i_sip_firmwareRange<5.1.0.8017

OR

mitel 6869i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel 6869i_sipMatch-

Node

mitel 6920_sip_firmwareRange≤5.1.0.8016

OR

mitel 6920_sip_firmwareRange6.0.0.368–6.1.0.165

AND

mitel 6920_sipMatch-

Node

mitel 6910_sip_firmwareRange≤5.1.0.8016

OR

mitel 6910_sip_firmwareRange6.0.0.368–6.1.0.165

AND

mitel 6910_sipMatch-

Node

mitel 6905_sip_firmwareRange≤5.1.0.8016

OR

mitel 6905_sip_firmwareRange6.0.0.368–6.1.0.165

AND

mitel 6905_sipMatch-

Source	Link
seclists	www.seclists.org/fulldisclosure/2022/Jun/32
mitel	www.mitel.com/support/security-advisories
packetstormsecurity	www.packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.html
mitel	www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0004
syss	www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021

21 Nov 2024 06:59Current

CVSS 3.16.8

CVSS 27.2

EPSS0.00738

mitel 6800 mitel 6900 sip phone undocumented functionality vulnerability unauthenticated attacker physical access root access access control code execution