Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-754m-gg4c-75j7

Опубликовано: 13 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.

EPSS

Процентиль: 40%
0.0018
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 6.8
nvd
больше 1 года назад

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.

EPSS

Процентиль: 40%
0.0018
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-88