What’s Vulnerable › Vulnerabilities

CVE-2024-28815

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-27 · updated 2026-06-17
• Weakness: CWE-1188

Description

A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system.

Affected products

• Mitel Cmg Suite: from 8.5_sp4 through 8.6
• Mitel Inattend: from 2.6_sp4 through 2.7

References

• https://cwe.mitre.org/data/definitions/1188.html
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0003-001-v1.pdf
• https://www.mitel.com/support/security-advisories
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0003
• https://cwe.mitre.org/data/definitions/1188.html
• https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0003-001-v1.pdf
• https://www.mitel.com/support/security-advisories
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0003

Get alerted when CVE-2024-28815 or the next vulnerability affects your stack