Lucene search

[email protected]CVE-2020-13617

HistoryAug 26, 2020 - 6:15 p.m.

CVE-2020-13617

2020-08-2618:15:10

CWE-307

[email protected]

web.nvd.nist.gov

mitel

mivoice

6800 series

6900 series

sip phones

firmware

cve-2020-13617

security vulnerability

information exposure

memory handling

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

Affected configurations

NVD

Node

mitel6863Match-

AND

mitel6863_firmwareRange≤5.0

mitel6863_firmwareMatch5.1-

mitel6863_firmwareMatch5.1sp1

mitel6863_firmwareMatch5.1sp2

mitel6863_firmwareMatch5.1sp3

mitel6863_firmwareMatch5.1sp4

Node

mitel6865Match-

AND

mitel6865_firmwareRange≤5.0

mitel6865_firmwareMatch5.1-

mitel6865_firmwareMatch5.1sp1

mitel6865_firmwareMatch5.1sp2

mitel6865_firmwareMatch5.1sp3

mitel6865_firmwareMatch5.1sp4

Node

mitel6867Match-

AND

mitel6867_firmwareRange≤5.0

mitel6867_firmwareMatch5.1-

mitel6867_firmwareMatch5.1sp1

mitel6867_firmwareMatch5.1sp2

mitel6867_firmwareMatch5.1sp3

mitel6867_firmwareMatch5.1sp4

Node

mitel6869Match-

AND

mitel6869_firmwareRange≤5.0

mitel6869_firmwareMatch5.1-

mitel6869_firmwareMatch5.1sp1

mitel6869_firmwareMatch5.1sp2

mitel6869_firmwareMatch5.1sp3

mitel6869_firmwareMatch5.1sp4

Node

mitel6873Match-

AND

mitel6873_firmwareRange≤5.0

mitel6873_firmwareMatch5.1-

mitel6873_firmwareMatch5.1sp1

mitel6873_firmwareMatch5.1sp2

mitel6873_firmwareMatch5.1sp3

mitel6873_firmwareMatch5.1sp4

Node

mitel6940Match-

AND

mitel6940_firmwareRange≤5.0

mitel6940_firmwareMatch5.1-

mitel6940_firmwareMatch5.1sp1

mitel6940_firmwareMatch5.1sp2

mitel6940_firmwareMatch5.1sp3

mitel6940_firmwareMatch5.1sp4

Node

mitel6970Match-

AND

mitel6970_firmwareRange≤5.0

mitel6970_firmwareMatch5.1-

mitel6970_firmwareMatch5.1sp1

mitel6970_firmwareMatch5.1sp2

mitel6970_firmwareMatch5.1sp3

mitel6970_firmwareMatch5.1sp4

Node

mitel6930Match-

AND

mitel6930_firmwareRange≤5.0

mitel6930_firmwareMatch5.1-

mitel6930_firmwareMatch5.1sp1

mitel6930_firmwareMatch5.1sp2

mitel6930_firmwareMatch5.1sp3

mitel6930_firmwareMatch5.1sp4

Node

mitel6920_firmwareRange≤5.0

mitel6920_firmwareMatch5.1-

mitel6920_firmwareMatch5.1sp1

mitel6920_firmwareMatch5.1sp2

mitel6920_firmwareMatch5.1sp3

mitel6920_firmwareMatch5.1sp4

AND

mitel6920Match-

Node

mitel6905_firmwareRange≤5.0

mitel6905_firmwareMatch5.1-

mitel6905_firmwareMatch5.1sp1

mitel6905_firmwareMatch5.1sp2

mitel6905_firmwareMatch5.1sp3

mitel6905_firmwareMatch5.1sp4

AND

mitel6905Match-

Node

mitel6910_firmwareRange≤5.0

mitel6910_firmwareMatch5.1-

mitel6910_firmwareMatch5.1sp1

mitel6910_firmwareMatch5.1sp2

mitel6910_firmwareMatch5.1sp3

mitel6910_firmwareMatch5.1sp4

AND

mitel6910Match-

CPENameOperatorVersion
mitel:6863_firmwaremitel 6863 firmwarele5.0
mitel:6863_firmwaremitel 6863 firmwareeq5.1

CPE	Name	Operator	Version
mitel:6863_firmware	mitel 6863 firmware	le	5.0
mitel:6863_firmware	mitel 6863 firmware	eq	5.1

References

www.mitel.com/support/security-advisories

www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Related for CVE-2020-13617

prion1 nvd1 cvelist1