{"id": "CVE-2020-13617", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-08-26T18:15:10.113", "references": [{"url": "https://www.mitel.com/support/security-advisories", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-307"}]}], "descriptions": [{"lang": "en", "value": "The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts."}, {"lang": "es", "value": "El componente de la Interfaz de Usuario Web de los Tel\u00e9fonos SIP de la Serie Mitel MiVoice 6800 y 6900 con versiones de firmware anteriores a 5.1.0.SP5, podr\u00eda permitir a un atacante no autenticado exponer informaci\u00f3n confidencial debido a un manejo inapropiado de la memoria durante los intentos fallidos de inicio de sesi\u00f3n"}], "lastModified": "2020-09-01T13:39:55.937", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6863_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7AE79A3-8F8B-4964-93A0-734C6982AF80", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6863_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60148792-AA6E-4D0E-A919-92CFBDA93427"}, {"criteria": "cpe:2.3:o:mitel:6863_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "580264D3-8677-4C5C-82E2-038C3CE9E321"}, {"criteria": "cpe:2.3:o:mitel:6863_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "714633DB-BF06-4C59-9CE6-01C6C3BE4DFA"}, {"criteria": "cpe:2.3:o:mitel:6863_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80ABBFBA-BA41-4163-99D4-1B0341BDFFCE"}, {"criteria": "cpe:2.3:o:mitel:6863_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA3EC57A-E03B-44A8-AC15-3FF696EEAA1E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6863:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8931208E-AE65-4BFA-98C6-9BFC7F17167E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6865_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF357FE4-9FF1-4EA8-8C23-80FEA0098079", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6865_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B47EF143-7163-494E-839F-24FF05FE0908"}, {"criteria": "cpe:2.3:o:mitel:6865_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E076FEB-C607-48B1-BA7B-2EAABB4F5E97"}, {"criteria": "cpe:2.3:o:mitel:6865_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6178F195-9543-4D2B-A5BA-2D2CA1B3D1D0"}, {"criteria": "cpe:2.3:o:mitel:6865_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373CC71D-10BB-4EB2-858E-31658F8A2FDE"}, {"criteria": "cpe:2.3:o:mitel:6865_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6041B7B-D4BF-4298-AC53-FEC62C468289"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6865:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "031C26C6-91DA-4876-B2B3-7F903527D9DE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6867_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4CCE18F-073D-4CB4-81FD-1DCBC3C95EB1", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6867_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A073A3C-4F10-4AB6-A4C6-808C27DCD7C3"}, {"criteria": "cpe:2.3:o:mitel:6867_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F8D49A0-B21E-4DBF-919A-C859B56A72B9"}, {"criteria": "cpe:2.3:o:mitel:6867_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAFCF656-7180-49AC-BCB4-9C878D808E49"}, {"criteria": "cpe:2.3:o:mitel:6867_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E94FE44-81C7-437E-9079-4F1AB58FC328"}, {"criteria": "cpe:2.3:o:mitel:6867_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A080097A-3C0D-4CAA-81C5-4AF34DB183ED"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6867:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3CA28BDA-2FE9-4D6C-B209-639FFC41BB82"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6869_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDCC23D8-CDE8-44DA-ACD7-FB0E45F8EEB0", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6869_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9A4026F-B540-41D3-A8D4-ADBA3042DB3B"}, {"criteria": "cpe:2.3:o:mitel:6869_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB2CFF02-1DA3-40A7-A8C1-B26EF961B21C"}, {"criteria": "cpe:2.3:o:mitel:6869_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "137C5C8F-76EA-41BC-A49C-E175B3FFFEBC"}, {"criteria": "cpe:2.3:o:mitel:6869_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D413BB8-B97D-4729-AB13-B71F102881D5"}, {"criteria": "cpe:2.3:o:mitel:6869_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C47C4102-0361-4891-AE23-1AF8706417CA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6869:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "06E937DB-9C85-4B51-B7C2-AE692C9DB1E7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6873_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9A7C4C1-74EB-4438-94B9-9900C9EF4CFE", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6873_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F65438A-A8D3-4B07-A0F4-046F0F373CA6"}, {"criteria": "cpe:2.3:o:mitel:6873_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "131EA8EB-0F54-4BF5-BDC4-554E9D0A260B"}, {"criteria": "cpe:2.3:o:mitel:6873_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA7ECE31-AE0F-4168-9FA9-5A5F4D1BDF92"}, {"criteria": "cpe:2.3:o:mitel:6873_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D124E8A4-1C96-4D21-8D39-DFBF49D1CB3F"}, {"criteria": "cpe:2.3:o:mitel:6873_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B8B4A44-67F2-4199-B66A-DF4DCE9DF697"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6873:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E2A85278-841C-497E-86D5-A9B0C401EC09"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6940_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2384567-4806-46BD-9317-94D868804794", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6940_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F222056-AFC7-44FA-BB76-CEE9F4139F04"}, {"criteria": "cpe:2.3:o:mitel:6940_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B86EAEC7-BFB5-488F-9CEB-27D57F6E7973"}, {"criteria": "cpe:2.3:o:mitel:6940_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E07B64F3-206C-41D1-B0D1-FDA1B458CA06"}, {"criteria": "cpe:2.3:o:mitel:6940_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "959BA4C3-1E94-47F6-BB6E-92B44DED9B78"}, {"criteria": "cpe:2.3:o:mitel:6940_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "622145EA-842A-48B8-B6AD-3609A7E707F5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6940:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD3759B6-49DF-44A8-A49E-E2306966B966"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6970_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E50A91FB-CBC7-4BC0-B706-521BE23550D8", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6970_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44BF1E96-71A4-4194-8640-93CFA93C6728"}, {"criteria": "cpe:2.3:o:mitel:6970_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CDEE027-A1CC-4249-85E5-A49F9F3976BF"}, {"criteria": "cpe:2.3:o:mitel:6970_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E207BA5E-C5BF-4E9D-B6C7-46963EC04B8A"}, {"criteria": "cpe:2.3:o:mitel:6970_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50128192-03BE-4B3F-B137-86CE0F6A0F4B"}, {"criteria": "cpe:2.3:o:mitel:6970_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B3A4E83-8BB3-4110-AA9B-E00A60FD85BD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6970:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "651C4A02-AE83-4D6E-B49F-D756DF8032F3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6930_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44298B54-C7E3-4047-9919-EE5E94426FC6", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6930_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF8174D1-8F9C-4A37-B81F-C065759ED7BF"}, {"criteria": "cpe:2.3:o:mitel:6930_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7907AA2-1574-4DAF-8BD9-B353DAB65ECE"}, {"criteria": "cpe:2.3:o:mitel:6930_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E961799-6917-4B11-8C3A-B89319CCF5EE"}, {"criteria": "cpe:2.3:o:mitel:6930_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F0EE9B0-D37E-487D-A47C-048AC85E94C0"}, {"criteria": "cpe:2.3:o:mitel:6930_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFD9DABD-628B-4EAA-884E-87F081F43525"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6930:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "92940D17-30A8-4F1C-95F7-9D7C922C58D8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6920_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D01DFA7D-2F04-4474-804D-D98103A322E6", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6920_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0BE473D-B722-48D2-B858-1B4519491B53"}, {"criteria": "cpe:2.3:o:mitel:6920_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E64AEF5A-5389-4285-B534-03E7B135A321"}, {"criteria": "cpe:2.3:o:mitel:6920_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21F00CAA-56FD-4651-AEE4-584264BA5CBD"}, {"criteria": "cpe:2.3:o:mitel:6920_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC20F25B-34EE-42D2-B477-2225AAD5905D"}, {"criteria": "cpe:2.3:o:mitel:6920_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E6499F7-5DA6-48DB-A1F4-7FD5D02BB416"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6920:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "313C5AC0-5535-4D83-9404-D1EAA38A5FA6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6905_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9138A81A-A3ED-4A93-8ACB-AE0073E03374", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6905_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27AED609-D33B-4E59-A4FD-85A19EA5FE24"}, {"criteria": "cpe:2.3:o:mitel:6905_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E31B15B-C8C7-4F0A-AA8A-ABF959C339A2"}, {"criteria": "cpe:2.3:o:mitel:6905_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AD03CB5-F4CD-46A7-A7A7-E208995B8B69"}, {"criteria": "cpe:2.3:o:mitel:6905_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6ED4FE3F-7C99-42C5-B11C-84DCD5C306E1"}, {"criteria": "cpe:2.3:o:mitel:6905_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29EDB71D-AC8E-4AA2-B2E3-3F3FB71B1DE2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6905:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BAD555D7-9F4C-46A1-B8DD-D60EB0BA6797"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mitel:6910_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDBF6266-6159-45D4-B1CA-250B62772C7F", "versionEndIncluding": "5.0"}, {"criteria": "cpe:2.3:o:mitel:6910_firmware:5.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "950AA5D9-5E52-4491-B904-0DAF2A2B0D91"}, {"criteria": "cpe:2.3:o:mitel:6910_firmware:5.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AC0F0FE-30C9-4A66-B159-883017426CFF"}, {"criteria": "cpe:2.3:o:mitel:6910_firmware:5.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF182182-2560-44E0-BE1C-F21CF312344B"}, {"criteria": "cpe:2.3:o:mitel:6910_firmware:5.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "730374AE-685E-4825-9891-39D3D9ECCB15"}, {"criteria": "cpe:2.3:o:mitel:6910_firmware:5.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31A1FAF6-21AE-43E7-89F1-910EA7865B79"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mitel:6910:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD92F0F9-CC50-4C36-A7E8-751B6C98E8B4"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}
