Mitel 6920 Firmware vulnerabilities

2 CVEs affecting Mitel 6920 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-13617, published 2020-08-26.

More from Mitel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-13617, published 2020-08-26. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory…
• CVE-2019-18863, published 2020-03-02. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a…