5.9
CVE-2019-18863
- EPSS 0.51%
- Veröffentlicht 02.03.2020 18:15:10
- Zuletzt bearbeitet 21.11.2024 04:33:44
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mitel ≫ 6863i Firmware Version < 5.1.0.2051
Mitel ≫ 6863i Firmware Version5.1.0.2051 Update-
Mitel ≫ 6863i Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6865i Firmware Version < 5.1.0.2051
Mitel ≫ 6865i Firmware Version5.1.0.2051 Update-
Mitel ≫ 6865i Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6867i Firmware Version < 5.1.0.2051
Mitel ≫ 6867i Firmware Version5.1.0.2051 Update-
Mitel ≫ 6867i Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6869i Firmware Version < 5.1.0.2051
Mitel ≫ 6869i Firmware Version5.1.0.2051 Update-
Mitel ≫ 6869i Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6873i Firmware Version < 5.1.0.2051
Mitel ≫ 6873i Firmware Version5.1.0.2051 Update-
Mitel ≫ 6873i Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6920 Firmware Version < 5.1.0.2051
Mitel ≫ 6920 Firmware Version5.1.0.2051 Update-
Mitel ≫ 6920 Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6930 Firmware Version < 5.1.0.2051
Mitel ≫ 6930 Firmware Version5.1.0.2051 Update-
Mitel ≫ 6930 Firmware Version5.1.0.2051 Updatesp2_hf2
Mitel ≫ 6940 Firmware Version < 5.1.0.2051
Mitel ≫ 6940 Firmware Version5.1.0.2051 Update-
Mitel ≫ 6940 Firmware Version5.1.0.2051 Updatesp2_hf2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.51% | 0.395 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006