Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-28066 Details
Description
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 8, 2024Exploitation: PocAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://syss.de | CVE | Not Applicable |
| https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-008.txt | CVE | ExploitThird Party Advisory |
| https://syss.de | [email protected] | Not Applicable |
| https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-008.txt | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1391 | Use of Weak Credentials | CISA-ADP |
| CWE-259 | Use of Hard-coded Password | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| mitel 6940w firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6940w | All versions |
CPE
Remediation
| |
| mitel 6930w firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6930w | All versions |
CPE
Remediation
| |
| mitel 6920w firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6920w | All versions |
CPE
Remediation
| |
| mitel 6970 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6970 | All versions |
CPE
Remediation
| |
| mitel 6915 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6915 | All versions |
CPE
Remediation
| |
| mitel 6910 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6910 | All versions |
CPE
Remediation
| |
| mitel 6905 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 6905 | All versions |
CPE
Remediation
| |
| mitel openscape cp710 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel openscape cp710 | All versions |
CPE
Remediation
| |
| mitel openscape cp410 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel openscape cp410 | All versions |
CPE
Remediation
| |
| mitel openscape cp210 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel openscape cp210 | All versions |
CPE
Remediation
| |
| mitel openscape cp110 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel openscape cp110 | All versions |
CPE
Remediation
| |
| mitel openscape cpx10 firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel openscape cpx10 | All versions |
CPE
Remediation
| |
| mitel openscape dect firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel openscape dect | All versions |
CPE
Remediation
| |
| mitel 700d dect firmware | >= 1.10.4.3, < 1.11.3.0 |
CPE
Remediation
| |
| mitel 700d dect | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 18, 2025 | Initial Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Aug 15, 2024 | CVE Modified | CISA-ADP |
| May 14, 2024 | CVE Modified | [email protected] |
| Apr 8, 2024 | New CVE Received | [email protected] |