CVE-2024-31963
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system.
Una vulnerabilidad en los teléfonos SIP Mitel de las series 6800 y 6900, incluida la unidad de conferencia 6970, hasta 6.3 SP3 HF4, permite a un atacante autenticado llevar a cabo un ataque de desbordamiento del búfer debido a una comprobación de los límites y una sanitización de entrada insuficientes. Un exploit exitoso podría permitir que un atacante provoque una denegación de servicio.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2024-04-08 CVE Reserved
- 2024-05-02 CVE Published
- 2024-08-02 CVE Updated
- 2025-04-15 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mitel Search vendor "Mitel" | 6800 Series Sip Phones Search vendor "Mitel" for product "6800 Series Sip Phones" | * | - |
Affected
| ||||||
| Mitel Search vendor "Mitel" | 6900 Series Sip Phones Search vendor "Mitel" for product "6900 Series Sip Phones" | * | - |
Affected
| ||||||
| Mitel Search vendor "Mitel" | 6900w Series Sip Phone Search vendor "Mitel" for product "6900w Series Sip Phone" | * | - |
Affected
| ||||||
| Mitel Search vendor "Mitel" | 6970 Search vendor "Mitel" for product "6970" | * | - |
Affected
| ||||||