MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2019-18863

CVSS 5.9v3.1pub. 2020-03-02upd. 2024-11-21

A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Mitel 6863i

    HW
    Mitel
    wszystkie wersje

  • Mitel 6863i Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6865i

    HW
    Mitel
    wszystkie wersje

  • Mitel 6865i Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6867i

    HW
    Mitel
    wszystkie wersje

  • Mitel 6867i Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6869i

    HW
    Mitel
    wszystkie wersje

  • Mitel 6869i Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6873i

    HW
    Mitel
    wszystkie wersje

  • Mitel 6873i Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6920

    HW
    Mitel
    wszystkie wersje

  • Mitel 6920 Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6930

    HW
    Mitel
    wszystkie wersje

  • Mitel 6930 Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051

  • Mitel 6940

    HW
    Mitel
    wszystkie wersje

  • Mitel 6940 Firmware

    OS
    Mitel
    5.1.0.2051< 5.1.0.2051
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2020-13617HIGH7.5ten sam produkt

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could all...

CVE-2022-29854MEDIUM6.8ten sam produkt

A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, co...

CVE-2024-41713CRITICAL9.1⚠ KEVPL ✓ten sam vendor

Path Traversal w Mitel MiCollab — nieautoryzowany dostęp do danych

CVE-2022-29499CRITICAL9.8⚠ KEVten sam vendor

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because...

CVE-2022-26143CRITICAL9.8⚠ KEVten sam vendor

The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through ...