GCVE - cpe:2.3:h:mitel:6920:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mitel:6920:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mitel (`750d81d3-7166-5542-b6c5-c328632b06f9`)
Product	6920 (`2b92226a-b5b2-524d-a59b-0ec2a99790f2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-29854`	not_vulnerable	2026-06-08 05:42:49.166354	Details available A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution. Published: 2022-05-13T13:12:13.000Z Updated: 2024-08-03T06:33:42.959Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0003 https://www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021 http://seclists.org/fulldisclosure/2022/Jun/32 http://packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13617`	not_vulnerable	2026-06-08 05:18:00.897573	Details available The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts. Published: 2020-08-26T18:02:00.000Z Updated: 2024-08-04T12:25:16.097Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18863`	not_vulnerable	2026-06-08 05:13:12.477643	Details available A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information. Published: 2020-03-02T17:52:37.000Z Updated: 2024-08-05T02:02:39.895Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.