CVE-2024-41710
Estado: AnalizadaAlta (7.2)⚠ Explotación activa
A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 42%
- Percentil entre todas las CVEs puntuadas: 99
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
CISA KEV — explotada activamente
- Añadida al catálogo: 12/2/2025
- Plazo de remediación: 5/3/2025
- Uso conocido en ransomware: Unknown
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1210Exploitation of Remote Serviceslateral movement85 % - Impacto principal
T1059Command and Scripting Interpreterexecution80 % - Impacto secundario
T1098Account Manipulationpersistence · privilege escalation45 %
AV:N con PR:H indica explotación remota de servicio por administrador (T1210). CWE-88 (argument injection) durante boot permite ejecución arbitraria de comandos (T1059). PR:H limita escalada de cuentas.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (15)
Mitel — 6863i SIP FirmwareMitel — 6865i SIP FirmwareMitel — 6867i SIP FirmwareMitel — 6869i SIP FirmwareMitel — 6873i SIP FirmwareMitel — 6905 SIP FirmwareMitel — 6910 SIP FirmwareMitel — 6915 SIP FirmwareMitel — 6920 SIP FirmwareMitel — 6920w SIP FirmwareMitel — 6930 SIP FirmwareMitel — 6930w SIP FirmwareMitel — 6940 SIP FirmwareMitel — 6940w SIP FirmwareMitel — 6970 Firmware
CWE
- CWE-88
- CWE-88
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-41710",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-41710",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "active"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-02-13T04:55:21.238275Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.2,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.2
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:o:mitel:6863i_sip_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:mitel:6865i_sip_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:mitel:6867i_sip_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:mitel:6869i_sip_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:mitel:6873i_sip_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:mitel:6930_sip_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:mitel:6940_sip_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6940_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6905_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6905_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6910_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6910_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6915_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6915_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6920_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6920_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6920w_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6920w_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6930w_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6930w_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6940w_sip_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6940w_sip_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:mitel:6970_conference_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "mitel",
"product": "6970_conference_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "6.4.0.136"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-08-12T19:15:16.850",
"references": [
{
"url": "https://github.com/kwburns/CVE/blob/main/Mitel/6.3.0.1020/README.md",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.mitel.com/support/security-advisories",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0019",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-41710",
"tags": [
"US Government Resource"
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-88"
}
]
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-88"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system."
},
{
"lang": "es",
"value": "Una vulnerabilidad en los teléfonos SIP Mitel de las series 6800, 6900 y 6900w, incluida la unidad de conferencia 6970, a través de R6.4.0.HF1 (R6.4.0.136) podría permitir que un atacante autenticado con privilegios administrativos lleve a cabo un ataque de inyección de argumentos, debido a una desinfección insuficiente de los parámetros durante el proceso de arranque. Un exploit exitoso podría permitir a un atacante ejecutar comandos arbitrarios dentro del contexto del sistema."
}
],
"lastModified": "2026-06-17T07:48:05.950",
"cisaActionDue": "2025-03-05",
"cisaExploitAdd": "2025-02-12",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6970_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D391B6ED-2FEF-43A3-8ECE-F42B79E1F9CD",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6970:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "651C4A02-AE83-4D6E-B49F-D756DF8032F3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6940w_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BD5BE48-120F-4A09-96C8-1095E04C8D69",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6940w_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E0BB4B3A-65F9-4726-938D-71B686BC13E1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6930w_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1E36148-4C07-46E4-B99C-FD3D8EBF48F8",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6930w_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C5230BCB-800F-434D-9AAB-A35A7F87D356"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6920w_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DE5CF0D-7BF3-468E-9809-6A1417C6989F",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6920w_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "663416FA-7F4F-45CA-A28F-3FF20214F20B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6920_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1D8483A-A448-416F-9918-B1D995616553",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6920_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8084E6D-1382-4785-9D01-0111A04B233A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6915_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A04266DF-3E78-47DB-BAA5-E79FCB38974B",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6915_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E3F279F8-83D8-4EEC-AA99-5EED398653E8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6910_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91BCABB3-BA8D-41B8-953B-A33C7BFB332C",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6910_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "412A5856-40B0-4633-B0F6-D87D3DB85BE5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6905_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B379EEB-2927-4A36-83A1-E7B4CB88F3E4",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6905_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "97CB43CD-3B53-4839-9AE4-67024A276305"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6940_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A3ED2A5-977E-4743-838F-62EE2A7A6837",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6940_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "05422EAF-9528-48CE-972C-9DF111F91570"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6930_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ECFE164-B4A2-44DC-B603-EF7C4E6F68F4",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6930_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1837336E-7A1D-414C-B888-56350AF6C32A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6873i_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66B0069E-B089-46B0-B1D7-C560A15FC26E",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6873i_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3C298A98-C6CE-4AEB-AD9F-FFCFA1E865F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6869i_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4415660E-385F-43DC-9F37-4C06AC7F052F",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6869i_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "654554ED-253C-4928-92D0-92EADF5F4768"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6867i_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "645135A3-362E-4DBB-805C-49A6B21EB4C9",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6867i_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4942E820-8103-4763-8715-F1301F233B05"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6865i_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91CC349C-AFB9-418F-9425-0038E91EF7BC",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6865i_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0AAFF6ED-44F6-4D3B-99EA-0F8FE58EC34B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mitel:6863i_sip_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10E7483A-BFB0-4F2A-B5DF-43AD0A308F7B",
"versionEndIncluding": "6.4.0.136"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mitel:6863i_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5D7C6275-6DA1-4768-A331-5290E8CB64D0"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org",
"cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "Mitel SIP Phones Argument Injection Vulnerability"
}