CVEvulnerability

CVE-2024-28066

8.8 HIGH Published 2024-04-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1391, CWE-259

Description

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

Affected configurations

• mitel 6940w firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 6930w firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 6920w firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 6970 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 6915 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 6910 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 6905 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel openscape cp710 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel openscape cp410 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel openscape cp210 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel openscape cp110 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel openscape cpx10 firmware (>= 1.10.4.3 < 1.11.3.0) • mitel openscape dect firmware (>= 1.10.4.3 < 1.11.3.0) • mitel 700d dect firmware (>= 1.10.4.3 < 1.11.3.0)

Related

Weakness · CWE (2)

  • CWE-1391 Use of Weak Credentials weakness
  • CWE-259 Use of Hard-coded Password weakness

References