Approved changes feed: RSS · Atom

cpe:2.3:h:mitel:6800_series_sip_phones:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMitel (750d81d3-7166-5542-b6c5-c328632b06f9)
Product6800 Series Sip Phones (d5cd532e-cd7d-5022-9f2d-89fa16eee2e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31965 vulnerable 2026-06-08 06:35:32.494594 Details available
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker with administrative privilege to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to access sensitive information.
Published: 2024-05-02T00:00:00.000Z
Updated: 2024-08-02T01:59:50.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31964 vulnerable 2026-06-08 06:35:32.494024 Details available
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication control. A successful exploit could allow an attacker to modify system configuration settings and potentially cause a denial of service.
Published: 2024-05-02T00:00:00.000Z
Updated: 2024-08-02T01:59:50.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31963 vulnerable 2026-06-08 06:35:32.490415 Details available
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker to conduct a buffer overflow attack due to insufficient bounds checking and input sanitization. A successful exploit could allow an attacker to gain access to sensitive information, modify system configuration or execute arbitrary commands within the context of the system.
Published: 2024-05-02T00:00:00.000Z
Updated: 2024-08-02T01:59:50.830Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.