Search
Find a vulnerability
Search criteria
2 vulnerabilities found for 6970 by mitel
CVE-2024-31963 (GCVE-0-2024-31963)
Vulnerability from nvd – Published: 2024-05-02 00:00 – Updated: 2024-08-02 01:59
VLAI
EPSS
VEX
Summary
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system.
Severity
6.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-02 17:48 UTC
CWE
- n/a
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| mitel | 6970 |
Affected:
- , ≤ 5.1.1 SP8
(custom)
cpe:2.3:h:mitel:6970:-:*:*:*:*:*:*:* |
|
| mitel | 6800_series_sip_phones |
Affected:
- , ≤ 6.3 SP3 HF4
(custom)
cpe:2.3:h:mitel:6800_series_sip_phones:-:*:*:*:*:*:*:* |
|
| mitel | 6900_series_sip_phones |
Affected:
- , ≤ 6.3 SP3 HF4
(custom)
cpe:2.3:h:mitel:6900_series_sip_phones:-:*:*:*:*:*:*:* |
|
| mitel | 6900w_series_sip_phone |
Affected:
- , ≤ 6.3.3
(custom)
cpe:2.3:h:mitel:6900w_series_sip_phone:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:h:mitel:6970:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6970",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "5.1.1 SP8",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:mitel:6800_series_sip_phones:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6800_series_sip_phones",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "6.3 SP3 HF4",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:mitel:6900_series_sip_phones:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6900_series_sip_phones",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "6.3 SP3 HF4",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:mitel:6900w_series_sip_phone:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6900w_series_sip_phone",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "6.3.3",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-31963",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-02T17:48:47.376329Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:36:27.298Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T01:59:50.830Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-03T16:10:28.270Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-31963",
"datePublished": "2024-05-02T00:00:00.000Z",
"dateReserved": "2024-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-02T01:59:50.830Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-31963 (GCVE-0-2024-31963)
Vulnerability from cvelistv5 – Published: 2024-05-02 00:00 – Updated: 2024-08-02 01:59
VLAI
EPSS
VEX
Summary
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system.
Severity
6.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-02 17:48 UTC
CWE
- n/a
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| mitel | 6970 |
Affected:
- , ≤ 5.1.1 SP8
(custom)
cpe:2.3:h:mitel:6970:-:*:*:*:*:*:*:* |
|
| mitel | 6800_series_sip_phones |
Affected:
- , ≤ 6.3 SP3 HF4
(custom)
cpe:2.3:h:mitel:6800_series_sip_phones:-:*:*:*:*:*:*:* |
|
| mitel | 6900_series_sip_phones |
Affected:
- , ≤ 6.3 SP3 HF4
(custom)
cpe:2.3:h:mitel:6900_series_sip_phones:-:*:*:*:*:*:*:* |
|
| mitel | 6900w_series_sip_phone |
Affected:
- , ≤ 6.3.3
(custom)
cpe:2.3:h:mitel:6900w_series_sip_phone:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:h:mitel:6970:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6970",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "5.1.1 SP8",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:mitel:6800_series_sip_phones:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6800_series_sip_phones",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "6.3 SP3 HF4",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:mitel:6900_series_sip_phones:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6900_series_sip_phones",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "6.3 SP3 HF4",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:mitel:6900w_series_sip_phone:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "6900w_series_sip_phone",
"vendor": "mitel",
"versions": [
{
"lessThanOrEqual": "6.3.3",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-31963",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-02T17:48:47.376329Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:36:27.298Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T01:59:50.830Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-03T16:10:28.270Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-31963",
"datePublished": "2024-05-02T00:00:00.000Z",
"dateReserved": "2024-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-02T01:59:50.830Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}