Vulnerabilities > CVE-2020-27639 - Unspecified vulnerability in Mitel products
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
PARTIAL low complexity
mitel
Summary
The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 21 | |
| Hardware | 3 |