CVE-2024-31965

2024-05-0216:15:07

[email protected]

web.nvd.nist.gov

mitel

sip phones

conference unit

vulnerability

path traversal

input validation

privilege escalation

exploit

sensitive information

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker with administrative privilege to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to access sensitive information.