Paper/Archive/CVE-2024-28815

CVE-2024-28815

mitel inattend — A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitiv…

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 60.3.603 × 2012.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

inattend2.6_sp4 – 2.7–CISA-ADP

cmg_suite8.5_sp4 – 8.6–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmitel.com/support/security-advisories refmitel.com/support/security-advisories/mitel-product-security-advisory-24-0003 refmitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0003-001-v1.pdf refcwe.mitre.org/data/definitions/1188.html