Known Exploited Vulnerabilities February 12, 2025 · CISA KEV Catalog

CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability

Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-41710 Mitel
Related: CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability Known Exploited Vulnerabilities · Jan 07, 2025
CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability Known Exploited Vulnerabilities · Jan 07, 2025
CVE-2022-40765: Mitel MiVoice Connect Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 21, 2023