Mitel 6905 SIP Firmware vulnerabilities

2 CVEs affecting Mitel 6905 SIP Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41710, published 2024-08-12.

More from Mitel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability, published 2024-08-12. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2025-02-12. EPSS: 41.6% chance of exploitation in the next 30 days. A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with…
• CVE-2022-29855, published 2022-05-11. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8…