CVE-2019-18863 (GCVE-0-2019-18863)
Vulnerability from cvelistv5
Published
2020-03-02 17:52
Modified
2024-08-05 02:02
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T02:02:39.895Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.mitel.com/support/security-advisories"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-02T17:52:37",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.mitel.com/support/security-advisories"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18863",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.mitel.com/support/security-advisories",
"refsource": "MISC",
"url": "https://www.mitel.com/support/security-advisories"
},
{
"name": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006",
"refsource": "CONFIRM",
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-18863",
"datePublished": "2020-03-02T17:52:37",
"dateReserved": "2019-11-11T00:00:00",
"dateUpdated": "2024-08-05T02:02:39.895Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2019-18863\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-03-02T18:15:10.667\",\"lastModified\":\"2024-11-21T04:33:44.357\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de longitud de clave en la implementaci\u00f3n de la clave de 128 bits de SRTP en los tel\u00e9fonos SIP Mitel de la serie 6800 y 6900, versiones anteriores a 5.1.0.2051 SP2, podr\u00eda permitir a un atacante iniciar un ataque de tipo man-in-the-middle cuando SRTP es usado en una llamada. Una explotaci\u00f3n con \u00e9xito puede permitir a un atacante interceptar informaci\u00f3n confidencial.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-326\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6863i_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"EB199BCE-1E4B-493E-9EB3-4C738F0E0AA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6863i_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"775C3676-5B20-4691-A5A9-341F867F0A6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6863i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE4E5DF3-46C4-416C-BCA2-905B2051E5D5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6863i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5A6A2B2-B2F2-4B72-9452-83A0E0B2E7A8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6865i_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"B7E245F6-4566-44D8-83A6-699AD5DA6AC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6865i_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"B832E54E-EB46-48FD-9652-6C02B68E3195\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6865i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA9B61CC-544E-48EC-90D9-36FED382A151\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6865i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D329E36-6CE5-4403-9852-4396EB6981B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6867i_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"9D290CFF-E33B-4123-A410-0FC431E4C72F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6867i_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"31597181-7C46-4B13-AE67-FA7C0DD422DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6867i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"A42364B4-884E-47F6-8927-34218FCC2EB6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6867i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3655D26-01DC-41DD-A19D-DC3E8ADCAF00\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6869i_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"BE2E5D76-07C2-4D4D-A812-DB04194574DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6869i_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE50A2BC-4485-4FDB-B618-C36E7B38A4A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6869i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"39DFC6B9-9ECD-49B3-AA3F-4FE58D4DFF8B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6869i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"209CF34F-4E50-4749-BA18-CD01D74A6550\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6873i_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"9FFCA32F-38F6-44C2-A632-D80B4075A6A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6873i_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"90F0D53B-012C-4860-BA3C-C713FA1CB96C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6873i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E12C2325-689A-4C85-B571-D27C2E34100F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6873i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69C5E134-D27B-4758-9DC6-545B694080C4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6920_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"C6577770-7BFC-4832-825B-834C5F22CBB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6920_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"207137FB-99F1-4883-AA1D-C9E09D79DDB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6920_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2963E6B8-5C15-4EAC-A628-AB38D6BBD56C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6920:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"313C5AC0-5535-4D83-9404-D1EAA38A5FA6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6930_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"E691DA45-54C0-4915-8839-0DB07A34B1C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6930_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"E363C50D-7A0A-4A15-912F-A0CAB7E64FC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6930_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDB84A40-294A-43F7-835A-D9A6AF99F54A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6930:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92940D17-30A8-4F1C-95F7-9D7C922C58D8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6940_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.1.0.2051\",\"matchCriteriaId\":\"A2B4967D-7A2B-4D10-9EB3-164F54406506\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6940_firmware:5.1.0.2051:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B9E4B5E-AEA9-42F7-B48A-F28A9165692F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mitel:6940_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*\",\"matchCriteriaId\":\"58AFB276-A7C3-4C8B-ACA6-B04ADA361261\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mitel:6940:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD3759B6-49DF-44A8-A49E-E2306966B966\"}]}]}],\"references\":[{\"url\":\"https://www.mitel.com/support/security-advisories\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mitel.com/support/security-advisories\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…