« Volver al listado

CVE-2024-28815

Estado: AplazadaCrítica (9.8)—

A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Mitel — CMGAIMitel — InattendAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-28815",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-28815",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-30T14:52:51.453912Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:mitel:inattend:*:*:*:*:*:*:*:*"
          ],
          "vendor": "mitel",
          "product": "inattend",
          "versions": [
            {
              "status": "affected",
              "version": "2.6_sp4",
              "versionType": "custom",
              "lessThanOrEqual": "2.7"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:mitel:cmg_suite:*:*:*:*:*:*:*:*"
          ],
          "vendor": "mitel",
          "product": "cmg_suite",
          "versions": [
            {
              "status": "affected",
              "version": "8.5_sp4",
              "versionType": "custom",
              "lessThanOrEqual": "8.6"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-03-27T07:15:49.493",
  "references": [
    {
      "url": "https://cwe.mitre.org/data/definitions/1188.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0003-001-v1.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mitel.com/support/security-advisories",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0003",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://cwe.mitre.org/data/definitions/1188.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0003-001-v1.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mitel.com/support/security-advisories",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0003",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1188"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el componente BluStar de Mitel InAttend 2.6 SP4 a 2.7 y CMG 8.5 SP4 a 8.6 podría permitir el acceso a información confidencial, cambios en la configuración del sistema o la ejecución de comandos arbitrarios dentro del contexto del sistema."
    }
  ],
  "lastModified": "2026-06-17T07:21:50.333",
  "sourceIdentifier": "cve@mitre.org"
}