Bluetooth Pairing Vulnerability in Mitel MiVoice SIP Phones
CVE-2020-27639

8.1HIGH

Key Information:

Vendor

Mitel
Status
6873i Sip Firmware
Vendor
CVE Published:
18 December 2020

What is CVE-2020-27639?

The Bluetooth functionality on Mitel MiVoice 6873i, 6930, and 6940 SIP phones prior to firmware version 5.1.0.SP6 is vulnerable to exploitation due to an inadequate pairing mechanism. An attacker within Bluetooth range can pair a malicious device when the phone loses connection to an authorized device. This can enable unauthorized access to voice communications, allowing the attacker to eavesdrop on sensitive conversations.

References

https://www.mitel.com/support/security-advisories
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.