CVE-2024-28066: Mitel 6905 Firmware

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

Affected products

• Mitel 6905 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 6910 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 6915 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 6920w Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 6930w Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 6940w Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 6970 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel 700d Dect Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel Openscape CP110 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel Openscape CP210 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel Openscape CP410 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel Openscape CP710 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel Openscape CPX10 Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)
• Mitel Openscape Dect Firmware: from 1.10.4.3, before 1.11.3.0 (fixed in 1.11.3.0)

Published 2024-04-08. Last modified 2026-06-17.