What’s Vulnerable › Vulnerabilities

CVE-2020-13617

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-26 · updated 2026-06-17
• Weakness: CWE-307

Description

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.

Affected products

• Mitel 6863 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6865 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6867 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6869 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6873 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6905 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6910 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6920 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6930 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6940 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4
• Mitel 6970 Firmware: through 5.0; 5.1, 5.1-sp1, 5.1-sp2, 5.1-sp3, 5.1-sp4

References

• https://www.mitel.com/support/security-advisories
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007
• https://www.mitel.com/support/security-advisories
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007

Get alerted when CVE-2020-13617 or the next vulnerability affects your stack