mitel Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mitel/ Sun, 26 Feb 2023 09:11:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png mitel Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mitel/ 32 32 CVE-2008-6797 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6797/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6797/ The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.

The post CVE-2008-6797 appeared first on CVE Vulnerability.

]]> The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.

The post CVE-2008-6797 appeared first on CVE Vulnerability.

]]> CVE-2020-13617 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13617/ Sun, 26 Feb 2023 06:37:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13617/ The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

The post CVE-2020-13617 appeared first on CVE Vulnerability.

]]> The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

The post CVE-2020-13617 appeared first on CVE Vulnerability.

]]> CVE-2019-19891 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19891/ Sun, 26 Feb 2023 06:32:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19891/ An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful exploit may allow the attacker to intercept sensitive information.

The post CVE-2019-19891 appeared first on CVE Vulnerability.

]]> An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful exploit may allow the attacker to intercept sensitive information.

The post CVE-2019-19891 appeared first on CVE Vulnerability.

]]> CVE-2019-18863 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-18863/ Sun, 26 Feb 2023 06:31:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-18863/ A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.

The post CVE-2019-18863 appeared first on CVE Vulnerability.

]]> A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.

The post CVE-2019-18863 appeared first on CVE Vulnerability.

]]> CVE-2022-29854 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-29854/ Thu, 23 Feb 2023 05:18:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-29854/ A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.

The post CVE-2022-29854 appeared first on CVE Vulnerability.

]]> A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.

The post CVE-2022-29854 appeared first on CVE Vulnerability.

]]>