CVE-2020-13617

HIGH

7.5

Beschreibung

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht8/26/2020

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

mitel:6863mitel:6863_firmwaremitel:6865mitel:6865_firmwaremitel:6867mitel:6867_firmwaremitel:6869mitel:6869_firmwaremitel:6873mitel:6873_firmwaremitel:6905mitel:6905_firmwaremitel:6910mitel:6910_firmwaremitel:6920mitel:6920_firmwaremitel:6930mitel:6930_firmwaremitel:6940mitel:6940_firmwaremitel:6970mitel:6970_firmware

Schwachen (CWE)

CWE-307

Referenzen

https://www.mitel.com/support/security-advisories(cve@mitre.org)

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007(cve@mitre.org)

https://www.mitel.com/support/security-advisories(af854a3a-2127-422b-91ae-364da2661108)

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.