CVE-2025-47187

HIGH EPSS 53.9%

Published Jul 23, 202511mo ago · Modified Jun 17, 20261w ago

7.5 CVSS 3.1

High

Published Jul 23, 2025 11mo ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to perform a file upload attack due to missing authentication mechanisms. A successful exploit could allow an attacker to upload arbitrary WAV files, which may potentially exhaust the phone’s storage without affecting the phone's availability or operation.

CVSS Details

Base Score

7.5

Exploitability

3.9

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

53.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-434 Unrestricted Upload of File with Dangerous Type Resource Mgmt

References 2

mitel.com https://www.mitel.com/support/security-advisories
mitel.com https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0004

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.