CVE-2025-47188

MEDIUMNuclei

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2025-47188 has a selected CVSS score of 6.5 (medium); EIP currently links 1 Nuclei template.

Description

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the phone, leading to disclosure or modification of sensitive configuration data or affecting device availability and operation.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jul 21, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 7, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

6800 Series/6900 Series/6900w Series SIP Phones and 6970 Conference Unit

Browse Mitel / 6800 Series/6900 Series/6900w Series SIP Phones and 6970 Conference Unit
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALMitel 6000 - OS Command InjectionCVSS 6.5

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. This template should be run on port 49249/tcp.

Impact

Unauthenticated attackers can execute arbitrary commands, potentially disclosing or modifying sensitive data and disrupting device operation.

Remediation

Update to the latest Mitel firmware version beyond 6.4 SP4.

Authorsmatejsmycka
Template tagscvecve2025rcenetworkmiteloastoobvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CPE: cpe:2.3:a:mitel:6000:*:*:*:*:*:*:*:*
FOFA: icon_hash="-1940372141" || icon_hash="-447557905"
https://labs.infoguard.ch/posts/cve-2025-47188_mitel_phone_unauthenticated_rce/ https://nvd.nist.gov/vuln/detail/CVE-2025-47188

Source: ProjectDiscovery

References

3