1. Home
  2. CVE Database
  3. CVE-2020-27639
HIGH · 8.1

CVE-2020-27639

The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device w...

Vulnerability Description

The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Mitel6873I Sip Firmware< 5.1.0
Mitel6873I Sip-
Mitel6930 Sip Firmware< 5.1.0
Mitel6930 Sip-
Mitel6940 Sip Firmware< 5.1.0
Mitel6940 Sip-

References

FAQ

What is CVE-2020-27639?

CVE-2020-27639 is a vulnerability with a CVSS score of 8.1 (HIGH). The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device w...

How severe is CVE-2020-27639?

CVE-2020-27639 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-27639?

Check the references section above for vendor advisories and patch information. Affected products include: Mitel 6873I Sip Firmware, Mitel 6873I Sip, Mitel 6930 Sip Firmware, Mitel 6930 Sip, Mitel 6940 Sip Firmware.