Argument Injection Vulnerability in Mitel SIP Phones
CVE-2024-41711

Currently unrated

Key Information:

Vendor
Mitel
Status
Mitel SIP Phones
Vendor
CVE Published:
13 August 2024

Summary

A vulnerability in various Mitel SIP phone models arises from inadequate parameter sanitization, potentially allowing an unauthenticated attacker with physical access to perform an argument injection attack. This could enable the execution of arbitrary commands within the phone's system context, raising significant security concerns for users.

References

https://www.mitel.com/support/security-advisories/mitel-p...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.