CVE-2022-29855
First published: Wed May 11 2022(Updated: )
Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier, and 6.0 (6.0.0.368) through 6.1 HF4 (6.1.0.165), could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mitel 6873i SIP | <5.1.0.8017 | |
| Mitel 6873i SIP | >=6.0.0.368<6.1.0.171 | |
| Mitel 6873i SIP firmware | ||
| Mitel 6930 firmware | <5.1.0.8017 | |
| Mitel 6930 firmware | >=6.0.0.368<6.1.0.171 | |
| Mitel 6930 SIP firmware | ||
| Mitel 6940 Firmware | <5.1.0.8017 | |
| Mitel 6940 Firmware | >=6.0.0.368<6.1.0.171 | |
| Mitel 6940w SIP | ||
| Mitel 6865i firmware | <5.1.0.8017 | |
| Mitel 6865i firmware | >=6.0.0.368<6.1.0.171 | |
| Mitel 6865i SIP firmware | ||
| Mitel 6867i firmware | <5.1.0.8017 | |
| Mitel 6867i firmware | >=6.0.0.368<6.1.0.171 | |
| Mitel 6867i SIP firmware | ||
| Mitel 6869i SIP Phone | <5.1.0.8017 | |
| Mitel 6869i SIP Phone | >=6.0.0.368<6.1.0.171 | |
| Mitel 6869i SIP Phone | ||
| Mitel 6920w Sip Firmware | <=5.1.0.8016 | |
| Mitel 6920w Sip Firmware | >=6.0.0.368<=6.1.0.165 | |
| Mitel 6920 SIP firmware | ||
| Mitel 6910 firmware | <=5.1.0.8016 | |
| Mitel 6910 firmware | >=6.0.0.368<=6.1.0.165 | |
| Mitel 6910 SIP | ||
| Mitel 6905 SIP firmware | <=5.1.0.8016 | |
| Mitel 6905 SIP firmware | >=6.0.0.368<=6.1.0.165 | |
| Mitel 6905 SIP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/167547/Mitel-6800-6900-Series-SIP-Phones-Backdoor-Access.html
- http://seclists.org/fulldisclosure/2022/Jun/32
- https://www.mitel.com/support/security-advisories
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0004
- https://www.syss.de/pentest-blog/undocumented-functionality-backdoor-in-mitel-desk-phones-syss-2022-021
Frequently Asked Questions
What is CVE-2022-29855?
CVE-2022-29855 is a vulnerability in Mitel 6800 and 6900 Series SIP phone devices that allows unauthorized access.
Which Mitel phone models are affected by CVE-2022-29855?
Mitel 6800 and 6900 Series SIP phone devices, excluding 6970, are affected by CVE-2022-29855.
What is the severity of CVE-2022-29855?
CVE-2022-29855 has a severity rating of 6.8 (High).
How can CVE-2022-29855 be exploited?
CVE-2022-29855 can be exploited by unauthenticated attackers to gain unauthorized access to Mitel 6800 and 6900 Series SIP phone devices.
Are there any references for CVE-2022-29855?
Yes, you can find more information about CVE-2022-29855 at the following references: [1] [2] [3].
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/mitel
- canonical/mitel 6873i sip
- version/mitel 6873i sip/6.0.0.368
- canonical/mitel 6873i sip firmware
- canonical/mitel 6930 firmware
- version/mitel 6930 firmware/6.0.0.368
- canonical/mitel 6930 sip firmware
- canonical/mitel 6940 firmware
- version/mitel 6940 firmware/6.0.0.368
- canonical/mitel 6940w sip
- canonical/mitel 6865i firmware
- version/mitel 6865i firmware/6.0.0.368
- canonical/mitel 6865i sip firmware
- canonical/mitel 6867i firmware
- version/mitel 6867i firmware/6.0.0.368
- canonical/mitel 6867i sip firmware
- canonical/mitel 6869i sip phone
- version/mitel 6869i sip phone/6.0.0.368
- canonical/mitel 6920w sip firmware
- version/mitel 6920w sip firmware/5.1.0.8016
- version/mitel 6920w sip firmware/6.0.0.368
- version/mitel 6920w sip firmware/6.1.0.165
- canonical/mitel 6920 sip firmware
- canonical/mitel 6910 firmware
- version/mitel 6910 firmware/5.1.0.8016
- version/mitel 6910 firmware/6.0.0.368
- version/mitel 6910 firmware/6.1.0.165
- canonical/mitel 6910 sip
- canonical/mitel 6905 sip firmware
- version/mitel 6905 sip firmware/5.1.0.8016
- version/mitel 6905 sip firmware/6.0.0.368
- version/mitel 6905 sip firmware/6.1.0.165
- canonical/mitel 6905 sip