Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-20001. PoCs published by Andrea Intilangelo.
AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in Mitel's VoIP server (mitel-cs018) where call data is leaked during authentication attempts. The exploit demonstrates how telephone numbers and call details are exposed when a call occurs during login.
Description
An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges information about the call and any SMDR records generated by the system. The information provided includes the service type, extension number and other parameters, related to the call activity.
Exploits (1)
This is a writeup describing an information disclosure vulnerability in Mitel's VoIP server (mitel-cs018) where call data is leaked during authentication attempts. The exploit demonstrates how telephone numbers and call details are exposed when a call occurs during login.
References (4)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L