Mitel 6905 Firmware vulnerabilities

2 CVEs affecting Mitel 6905 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28066, published 2024-04-08.

More from Mitel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-13617, published 2020-08-26. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory…
• CVE-2024-28066, published 2024-04-08. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).