Actively exploited · Published Aug 12, 2024 · Assigned by mitre
CVE-2024-41710
Medium 6.8 Exploited
In plain English
A medium-severity argument injection in SIP Phones from Mitel. Attackers are actively exploiting it in the wild (listed by CISA on February 12, 2025). The chance it is exploited in the next 30 days is estimated at 41.6% (higher than 99% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Mar 5, 2025.
Official description
A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.
Affected products (as reported)
Weakness: CWE-88 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://www.mitel.com/support/security-advisories
- https://github.com/kwburns/CVE/blob/main/Mitel/6.3.0.1020/README.md
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0019
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-41710 government-resource