CVE-2024-41710

The CVE-2024-41710 issue affects Mitel 6800/6900/6900w Series SIP Phones (including the 6970 Conference Unit) up to version R6.4.0.HF1 (R6.4.0.136). It stems from insufficient parameter sanitization during boot, allowing an authenticated attacker with administrative privileges to perform an argum...

CVE-2024-28066

CVE-2024-28066 affects Unify CP IP Phone firmware 1.10.4.3. The root cause is a hardcoded root password enabling weak credentials, rated CVSSv3.1: 8.8 (HIGH) with Adjacent access, no user interaction required. The Red Hat/NVD/CVE entries corroborate the issue; exploitation status is not documente...

CVE-2020-13617

CVE-2020-13617 affects Mitel MiVoice 6800/6900 series SIP Phones with firmware before 5.1.0.SP5. The Web UI component exposes sensitive information due to improper memory handling during failed login attempts, allowing an unauthenticated attacker to access data. According to the NVD entry, the is...