ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-28066

PoC —
CVSS 3.1
8.8 high
EPSS
<1%p38
Published
()
Modified
Description

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

Vendors
mitel
Products
6940w firmware, 6930w firmware, 6920w firmware, 6970 firmware, 6915 firmware, 6910 firmware, 6905 firmware, openscape cp710 firmware, openscape cp410 firmware, openscape cp210 firmware, openscape cp110 firmware, openscape cpx10 firmware
Weakness
CWE-259, CWE-1391
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.