CVE-2022-29855
published 2022-05-11CVE-2022-29855: Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP…
PriorityP433medium6.8CVSS 3.1
AVPACLPRNUINSUCHIHAH
EPSS
0.74%
49.9th percentile
Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier, and 6.0 (6.0.0.368) through 6.1 HF4 (6.1.0.165), could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mitel | 6865i_sip_firmware | < 5.1.0.8017 | 5.1.0.8017 |
| mitel | 6865i_sip_firmware | >= 6.0.0.368 < 6.1.0.171 | 6.1.0.171 |
| mitel | 6867i_sip_firmware | < 5.1.0.8017 | 5.1.0.8017 |
| mitel | 6867i_sip_firmware | >= 6.0.0.368 < 6.1.0.171 | 6.1.0.171 |
| mitel | 6869i_sip_firmware | < 5.1.0.8017 | 5.1.0.8017 |
| mitel | 6869i_sip_firmware | >= 6.0.0.368 < 6.1.0.171 | 6.1.0.171 |
| mitel | 6873i_sip_firmware | < 5.1.0.8017 | 5.1.0.8017 |
| mitel | 6873i_sip_firmware | >= 6.0.0.368 < 6.1.0.171 | 6.1.0.171 |
| mitel | 6905_sip_firmware | <= 5.1.0.8016 | — |
| mitel | 6905_sip_firmware | 6.0.0.368 – 6.1.0.165 | — |
| mitel | 6910_sip_firmware | <= 5.1.0.8016 | — |
| mitel | 6910_sip_firmware | 6.0.0.368 – 6.1.0.165 | — |
| mitel | 6920_sip_firmware | <= 5.1.0.8016 | — |
| mitel | 6920_sip_firmware | 6.0.0.368 – 6.1.0.165 | — |
| mitel | 6930_sip_firmware | < 5.1.0.8017 | 5.1.0.8017 |
| mitel | 6930_sip_firmware | >= 6.0.0.368 < 6.1.0.171 | 6.1.0.171 |
| mitel | 6940_sip_firmware | < 5.1.0.8017 | 5.1.0.8017 |
| mitel | 6940_sip_firmware | >= 6.0.0.368 < 6.1.0.171 | 6.1.0.171 |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.htmlhttp://seclists.org/fulldisclosure/2022/Jun/32https://www.mitel.com/support/security-advisorieshttps://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0004https://www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021http://packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.htmlhttp://seclists.org/fulldisclosure/2022/Jun/32https://www.mitel.com/support/security-advisorieshttps://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0004https://www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021
2022-05-11
Published