CVE-2024-28066

HIGH

Unify CP IP Phone <1.10.4.3 - Info Disclosure

Title source: llm

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

CVSS v3 8.8

EPSS 0.0004

EPSS Percentile 13.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-1391 CWE-259

Status published

Products (14)

mitel/6905_firmware 1.10.4.3 - 1.11.3.0

mitel/6910_firmware 1.10.4.3 - 1.11.3.0

mitel/6915_firmware 1.10.4.3 - 1.11.3.0

mitel/6920w_firmware 1.10.4.3 - 1.11.3.0

mitel/6930w_firmware 1.10.4.3 - 1.11.3.0

mitel/6940w_firmware 1.10.4.3 - 1.11.3.0

mitel/6970_firmware 1.10.4.3 - 1.11.3.0

mitel/700d_dect_firmware 1.10.4.3 - 1.11.3.0

mitel/openscape_cp110_firmware 1.10.4.3 - 1.11.3.0

mitel/openscape_cp210_firmware 1.10.4.3 - 1.11.3.0

... and 4 more

Published Apr 08, 2024

Tracked Since Feb 18, 2026