CVEvulnerability

CVE-2019-18863

5.9 MEDIUM Published 2020-03-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-326

Description

A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.

Affected configurations

• mitel 6863i firmware (< 5.1.0.2051) • mitel 6863i firmware 5.1.0.2051 • mitel 6865i firmware (< 5.1.0.2051) • mitel 6865i firmware 5.1.0.2051 • mitel 6867i firmware (< 5.1.0.2051) • mitel 6867i firmware 5.1.0.2051 • mitel 6869i firmware (< 5.1.0.2051) • mitel 6869i firmware 5.1.0.2051 • mitel 6873i firmware (< 5.1.0.2051) • mitel 6873i firmware 5.1.0.2051 • mitel 6920 firmware (< 5.1.0.2051) • mitel 6920 firmware 5.1.0.2051 • mitel 6930 firmware (< 5.1.0.2051) • mitel 6930 firmware 5.1.0.2051 • mitel 6940 firmware (< 5.1.0.2051) • mitel 6940 firmware 5.1.0.2051

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References