CVE-2024-41711: Medium severity mitel 6800 vulnerability
A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41711?
CVE-2024-41711 has been classified as a high-severity vulnerability due to the potential for unauthorized access and argument injection attacks.
How do I fix CVE-2024-41711?
To fix CVE-2024-41711, update the affected Mitel SIP Phones to firmware version R6.4.0.HF2 or later.
What types of Mitel devices are affected by CVE-2024-41711?
CVE-2024-41711 affects Mitel 6800 Series SIP Phones, 6900 Series SIP Phones, 6900w Series SIP Phones, and the 6970 Conference Unit.
Can an attacker exploit CVE-2024-41711 remotely?
No, CVE-2024-41711 requires physical access to the affected devices for exploitation.
What kind of attack can be executed through CVE-2024-41711?
CVE-2024-41711 allows an unauthenticated attacker to conduct an argument injection attack due to insufficient parameter sanitization.