← Back

CVE-2024-28066

nvd nist
Published: Apr 8, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

Affected (14)

Mitel
14 products
6940w Firmware
6930w Firmware
6920w Firmware
6970 Firmware
6915 Firmware
6910 Firmware
6905 Firmware
Openscape Cp710 Firmware
Openscape Cp410 Firmware
Openscape Cp210 Firmware
Openscape Cp110 Firmware
Openscape Cpx10 Firmware
Openscape Dect Firmware
700d Dect Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6940w Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6940w
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6930w Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6930w
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6920w Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6920w
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6970 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6970
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6915 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6915
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6910 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6910
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
6905 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
6905
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openscape Cp710 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
Openscape Cp710
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openscape Cp410 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
Openscape Cp410
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openscape Cp210 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
Openscape Cp210
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openscape Cp110 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
Openscape Cp110
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openscape Cpx10 Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
Openscape Cpx10
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openscape Dect Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
Openscape Dect
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
700d Dect Firmware
From 1.10.4.3 to 1.11.3.0
Running on/withPlatform Versions
Mitel
700d Dect
All versions

Related CWEs

CWE-1391
Use of Weak Credentials
The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.
CWE-259
Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

References (4)

Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.