CVE-2022-29854 – Mitel 6800/6900 Series SIP Phones Backdoor Access

https://notcve.org/view.php?id=CVE-2022-29854

13 May 2022 — A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution. Una vulnerabilidad en los teléfonos IP de la serie 6900 de Mitel (MiNet), excepto el 6970, versiones 1.8 (1.8.0.12) y anteriores, podría permitir... • https://packetstorm.news/files/id/167547 • CWE-863: Incorrect Authorization •