Mitel 6930 SIP Firmware vulnerabilities

3 CVEs affecting Mitel 6930 SIP Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41710, published 2024-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability, published 2024-08-12. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2025-02-12. EPSS: 41.6% chance of exploitation in the next 30 days. A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with…
CVE-2022-29855, published 2022-05-11. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8…
CVE-2020-27639, published 2020-12-18. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device…