CVEvulnerability

CVE-2020-13617

7.5 HIGH Published 2020-08-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-307

Description

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

Affected configurations

• mitel 6863 firmware (<= 5.0) • mitel 6863 firmware 5.1 • mitel 6865 firmware (<= 5.0) • mitel 6865 firmware 5.1 • mitel 6867 firmware (<= 5.0) • mitel 6867 firmware 5.1 • mitel 6869 firmware (<= 5.0) • mitel 6869 firmware 5.1 • mitel 6873 firmware (<= 5.0) • mitel 6873 firmware 5.1 • mitel 6940 firmware (<= 5.0) • mitel 6940 firmware 5.1 • mitel 6970 firmware (<= 5.0) • mitel 6970 firmware 5.1 • mitel 6930 firmware (<= 5.0) • mitel 6930 firmware 5.1 • mitel 6920 firmware (<= 5.0) • mitel 6920 firmware 5.1 • mitel 6905 firmware (<= 5.0) • mitel 6905 firmware 5.1 • mitel 6910 firmware (<= 5.0) • mitel 6910 firmware 5.1

Related

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References