SB2024041922 - Multiple vulnerabilities in Mitel 6800, 6900, 6900w Series SIP Phones and 6970 Conference Unit

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2024-31963)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error. A remote user can trigger memory corruption and cause a denial of service condition on the target system.

2) Information disclosure (CVE-ID: CVE-2024-31967)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can gain unauthorized access to sensitive information on the system.

3) Improper Neutralization of Argument Delimiters in a Command (CVE-ID: CVE-2024-31966)

The vulnerability allows a local attacker to compromsie the target system.

The vulnerability exists due to an argument injection issue. An attacker with physical access can execute arbitrary code on the target system.

4) Path traversal (CVE-ID: CVE-2024-31965)

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote administrator can send a specially crafted HTTP request and read arbitrary files on the system.

5) Improper Authentication (CVE-ID: CVE-2024-31964)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in when processing authentication requests. A remote attacker can modify SIP phone configuration settings and perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0006
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin240006001-v10.pdf
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0010
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin240010001-v10.pdf
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0009
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin240009001-v10.pdf
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0008
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin240008001-v10.pdf
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0007
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin240007001-v10.pdf