CVE-2024-41710

HighCVSS 7.2/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
mitel	6940_sip_firmware	<= 6.4.0.136
mitel	6905_sip_firmware	<= 6.4.0.136
mitel	6910_sip_firmware	<= 6.4.0.136
mitel	6915_sip_firmware	<= 6.4.0.136
mitel	6920_sip_firmware	<= 6.4.0.136
mitel	6920w_sip_firmware	<= 6.4.0.136
mitel	6930w_sip_firmware	<= 6.4.0.136
mitel	6940w_sip_firmware	<= 6.4.0.136
mitel	6970_conference_firmware	<= 6.4.0.136

References

https://github.com/kwburns/CVE/blob/main/Mitel/6.3.0.1020/README.mdExploit, Third Party Advisory
https://www.mitel.com/support/security-advisoriesVendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0019Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-41710US Government Resource

Timeline

Published: Aug 12, 2024
Last modified: Jun 17, 2026
Added to CISA KEV: Feb 12, 2025
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-417116.8A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (CVE-2024-417126.6A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacker to conduct a comma CVE-2024-417139.1A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenti CVE-2024-417148.8A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (M CVE-2024-417154.3The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it po CVE-2024-417168.1Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker CVE-2024-417179.8Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files CVE-2024-417195.5When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-CVE-2024-41724.3A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /CVE-2024-417208.0Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow CVE-2024-417218.1An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbi CVE-2024-417226.5In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using