CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-28066
High (8.8) in mitel. EPSS 0.4% chance of exploitation in the next 30 days.
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-259, CWE-1391
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mitel:6905_firmware
- mitel:6910_firmware
- mitel:6915_firmware
- mitel:6920w_firmware
- mitel:6930w_firmware
- mitel:6940w_firmware
- mitel:6970_firmware
- mitel:700d_dect_firmware
- mitel:openscape_cp110_firmware
- mitel:openscape_cp210_firmware
- mitel:openscape_cp410_firmware
- mitel:openscape_cp710_firmware
- mitel:openscape_cpx10_firmware
- mitel:openscape_dect_firmware