CVE-2024-41710

The CVE-2024-41710 issue affects Mitel 6800/6900/6900w Series SIP Phones (including the 6970 Conference Unit) up to version R6.4.0.HF1 (R6.4.0.136). It stems from insufficient parameter sanitization during boot, allowing an authenticated attacker with administrative privileges to perform an argum...

CVE-2022-29855

CVE-2022-29855 affects Mitel 6800/6900 Series SIP phones (excluding 6970) with firmware variants up to 5.1 SP8 and up to 6.1 HF4, where an undocumented test/backdoor functionality during system boot can grant an unauthenticated, physically proximate attacker root access via a boot-time check that...

CVE-2020-27639

The CVEffects Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 suffer a Bluetooth pairing flaw that allows an unauthenticated attacker within Bluetooth range to pair a rogue device when the handset loses connection, enabling potential eavesdropping. Affected component...