CVE-2024-28066: High severity unify cp ip phone vulnerability
Published Apr 8, 2024
·Updated
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
Affected Software
29 affected components
Unify CP IP Phone
All of the following
Mitel 6940w Firmware>=1.10.4.3<1.11.3.0
Mitel 6940w
All of the following
Mitel 6930w Firmware>=1.10.4.3<1.11.3.0
Mitel 6930w
All of the following
Mitel 6920w Firmware>=1.10.4.3<1.11.3.0
Mitel 6920w
All of the following
Mitel 6970 Firmware>=1.10.4.3<1.11.3.0
Mitel 6970
All of the following
Mitel 6915 Firmware>=1.10.4.3<1.11.3.0
Mitel 6915
All of the following
Mitel 6910 Firmware>=1.10.4.3<1.11.3.0
Mitel 6910
All of the following
Mitel 6905 Firmware>=1.10.4.3<1.11.3.0
Mitel 6905
All of the following
Mitel Openscape Cp710 Firmware>=1.10.4.3<1.11.3.0
Mitel Openscape Cp710
All of the following
Mitel Openscape Cp410 Firmware>=1.10.4.3<1.11.3.0
Mitel Openscape Cp410
All of the following
Mitel Openscape Cp210 Firmware>=1.10.4.3<1.11.3.0
Mitel Openscape Cp210
All of the following
Mitel Openscape Cp110 Firmware>=1.10.4.3<1.11.3.0
Mitel Openscape Cp110
All of the following
Mitel Openscape Cpx10 Firmware>=1.10.4.3<1.11.3.0
Mitel Openscape Cpx10
All of the following
Mitel Openscape Dect Firmware>=1.10.4.3<1.11.3.0
Mitel Openscape Dect
All of the following
Mitel 700d Dect Firmware>=1.10.4.3<1.11.3.0
Mitel 700d Dect
Event History
Apr 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-28066?
CVE-2024-28066 has been classified as a critical vulnerability due to the use of weak credentials in Unify CP IP Phone firmware.
2
How do I fix CVE-2024-28066?
To fix CVE-2024-28066, update the firmware of your Unify CP IP Phone to the latest version that addresses the hardcoded root password issue.
3
What devices are affected by CVE-2024-28066?
CVE-2024-28066 affects all Unify CP IP Phones running firmware version 1.10.4.3 or earlier.
4
What are the implications of CVE-2024-28066?
The implications of CVE-2024-28066 include potential unauthorized access to the device, allowing attackers to gain control of the phone.
5
Is there a workaround for CVE-2024-28066?
Currently, there is no known workaround for CVE-2024-28066; upgrading the firmware is the recommended course of action.