Lucene search

[email protected]CVE-2022-29855

HistoryMay 11, 2022 - 8:15 p.m.

CVE-2022-29855

2022-05-1120:15:08

[email protected]

web.nvd.nist.gov

mitel

6800 series

6900 series

sip phone

cve-2022-29855

vulnerability

unauthorized access

root access

access control

code execution

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have “undocumented functionality.” A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier, and 6.0 (6.0.0.368) through 6.1 HF4 (6.1.0.165), could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.

Affected configurations

NVD

Node

mitel6873i_sip_firmwareRange<5.1.0.8017

mitel6873i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel6873i_sipMatch-

Node

mitel6930_sip_firmwareRange<5.1.0.8017

mitel6930_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel6930_sipMatch-

Node

mitel6940_sip_firmwareRange<5.1.0.8017

mitel6940_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel6940_sipMatch-

Node

mitel6865i_sip_firmwareRange<5.1.0.8017

mitel6865i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel6865i_sipMatch-

Node

mitel6867i_sip_firmwareRange<5.1.0.8017

mitel6867i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel6867i_sipMatch-

Node

mitel6869i_sip_firmwareRange<5.1.0.8017

mitel6869i_sip_firmwareRange6.0.0.368–6.1.0.171

AND

mitel6869i_sipMatch-

Node

mitel6920_sip_firmwareRange≤5.1.0.8016

mitel6920_sip_firmwareRange6.0.0.368–6.1.0.165

AND

mitel6920_sipMatch-

Node

mitel6910_sip_firmwareRange≤5.1.0.8016

mitel6910_sip_firmwareRange6.0.0.368–6.1.0.165

AND

mitel6910_sipMatch-

Node

mitel6905_sip_firmwareRange≤5.1.0.8016

mitel6905_sip_firmwareRange6.0.0.368–6.1.0.165

AND

mitel6905_sipMatch-

CPENameOperatorVersion
mitel:6873i_sip_firmwaremitel 6873i sip firmwarelt5.1.0.8017
mitel:6873i_sip_firmwaremitel 6873i sip firmwarelt6.1.0.171

CPE	Name	Operator	Version
mitel:6873i_sip_firmware	mitel 6873i sip firmware	lt	5.1.0.8017
mitel:6873i_sip_firmware	mitel 6873i sip firmware	lt	6.1.0.171

References

packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.html

seclists.org/fulldisclosure/2022/Jun/32

www.mitel.com/support/security-advisories

www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0004

www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

Related for CVE-2022-29855

nvd1 prion1 cvelist1 packetstorm1 zdt1 thn2