Command Injection Vulnerability in Mitel SIP Phones
CVE-2025-47188

6.5MEDIUM

Key Information:

Vendor

Mitel
Status
Mitel SIP Phones
Vendor
CVE Published:
7 August 2025

What is CVE-2025-47188?

A command injection vulnerability exists in multiple models of Mitel SIP Phones, including the 6800 and 6900 Series. This flaw arises from inadequate parameter sanitization, allowing unauthenticated attackers to execute arbitrary commands. Exploitation of this vulnerability may lead to the unauthorized disclosure or modification of sensitive configuration information and can impact the availability and functionality of the device.

References

https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-p...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-47188 : Command Injection Vulnerability in Mitel SIP Phones