CVE:CVE-2019-18863
CNNVD:CNNVD-202003-025
Mitel Networks 6800 SIP和Mitel Networks 6900 SIP都是加拿大Mitel Networks公司的产品。Mitel Networks 6800 SIP是一款6800 SIP系列IP电话。Mitel Networks 6900 SIP是一款6900 SIP系列IP电话。
Mitel Networks 6800和6900 SIP系列5.1.0.2051 SP2及之前版本中SRTP 128-bit密钥实现存在安全漏洞。攻击者可通过实施中间人攻击利用该漏洞拦截敏感信息。
solution:Upgrade mitel 6863i_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6865i_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6867i_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6869i_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6873i_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6920_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6930_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2; Upgrade mitel 6940_firmware to a higher version than 5.1.0.2051,5.1.0.2051,5.1.0.2051:sp2_hf2,and avoid the version (,5.1.0.2051),5.1.0.2051,5.1.0.2051:sp2_hf2