Vulnerability Description
An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mitel | 6869I Sip Firmware | <= 4.5.0.41 |
| Mitel | 6869I Sip | - |
Related Weaknesses (CWE)
References
- https://github.com/kwburns/CVE/blob/main/Mitel/5.0.0.1018/code/exploit-provis.pyProduct
- https://github.com/kwburns/CVE/tree/main/Mitel/5.0.0.1018#authenticated-remote-cExploitThird Party Advisory
- https://www.youtube.com/watch?v=I9TQqfP5qzMExploit
- https://github.com/kwburns/CVE/blob/main/Mitel/5.0.0.1018/code/exploit-provis.pyProduct
- https://github.com/kwburns/CVE/tree/main/Mitel/5.0.0.1018#authenticated-remote-cExploitThird Party Advisory
- https://www.youtube.com/watch?v=I9TQqfP5qzMExploit
FAQ
What is CVE-2024-37569?
CVE-2024-37569 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The...
How severe is CVE-2024-37569?
CVE-2024-37569 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-37569?
Check the references section above for vendor advisories and patch information. Affected products include: Mitel 6869I Sip Firmware, Mitel 6869I Sip.