Command Injection Vulnerability in Mitel SIP Phones
CVE-2025-47188
6.5MEDIUM
What is CVE-2025-47188?
A command injection vulnerability exists in multiple models of Mitel SIP Phones, including the 6800 and 6900 Series. This flaw arises from inadequate parameter sanitization, allowing unauthenticated attackers to execute arbitrary commands. Exploitation of this vulnerability may lead to the unauthorized disclosure or modification of sensitive configuration information and can impact the availability and functionality of the device.
References
EPSS Score
9% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved