File Upload Vulnerability in Mitel SIP Phones
CVE-2025-47187
7.5HIGH
What is CVE-2025-47187?
A flaw in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, arises from inadequate authentication measures. This vulnerability permits an unauthenticated attacker to execute a file upload attack, potentially allowing the upload of arbitrary WAV files. Such an exploit could lead to the excessive consumption of phone storage, affecting the device's capacity without disrupting its core functionalities. Users must apply available security updates to mitigate the risk associated with this vulnerability.