Vulnerability Description
The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote code execution.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mitel | Mivoice 5330E Firmware | <= 6.5.0.16 |
| Mitel | Mivoice 5330E | - |
Related Weaknesses (CWE)
References
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-aVendor Advisory
- https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330ExploitThird Party Advisory
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-aVendor Advisory
- https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330ExploitThird Party Advisory
FAQ
What is CVE-2018-15497?
CVE-2018-15497 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of...
How severe is CVE-2018-15497?
CVE-2018-15497 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-15497?
Check the references section above for vendor advisories and patch information. Affected products include: Mitel Mivoice 5330E Firmware, Mitel Mivoice 5330E.