File Upload Vulnerability in Mitel SIP Phones
CVE-2025-47187

7.5HIGH

Key Information:

Vendor

Mitel
Status
SIP Phones
Vendor
CVE Published:
23 July 2025

What is CVE-2025-47187?

A flaw in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, arises from inadequate authentication measures. This vulnerability permits an unauthenticated attacker to execute a file upload attack, potentially allowing the upload of arbitrary WAV files. Such an exploit could lead to the excessive consumption of phone storage, affecting the device's capacity without disrupting its core functionalities. Users must apply available security updates to mitigate the risk associated with this vulnerability.

References

https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-p...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-47187 : File Upload Vulnerability in Mitel SIP Phones