GCVE - cpe:2.3:h:mitel:6905:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mitel:6905:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mitel (`750d81d3-7166-5542-b6c5-c328632b06f9`)
Product	6905 (`b82f1528-3753-5afb-be0e-9bf5295e7453`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28066`	not_vulnerable	2026-06-08 06:33:26.335646	Details available In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password). Published: 2024-04-08T00:00:00.000Z Updated: 2024-08-15T14:44:40.826Z Open on db.gcve.eu Reference links https://syss.de https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-008.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29854`	not_vulnerable	2026-06-08 05:42:49.163340	Details available A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution. Published: 2022-05-13T13:12:13.000Z Updated: 2024-08-03T06:33:42.959Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0003 https://www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021 http://seclists.org/fulldisclosure/2022/Jun/32 http://packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13617`	not_vulnerable	2026-06-08 05:18:00.901406	Details available The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts. Published: 2020-08-26T18:02:00.000Z Updated: 2024-08-04T12:25:16.097Z Open on db.gcve.eu Reference links https://www.mitel.com/support/security-advisories https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.