How many Mitel 6900_series_sip_phones CVEs are in CISA KEV?

Yes — 1 of Mitel 6900_series_sip_phones's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Mitel 6900_series_sip_phones are affected?

6 distinct Mitel 6900_series_sip_phones versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Mitel 6900_series_sip_phones CVEs?

Mitel 6900_series_sip_phones's CVEs most often map to these CWE weakness types: CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control).

How many critical Mitel 6900_series_sip_phones vulnerabilities are there?

Mitel 6900_series_sip_phones has 1 critical and 2 high-severity CVEs.

What is the average severity of Mitel 6900_series_sip_phones CVEs?

The average CVSS base score across Mitel 6900_series_sip_phones's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Mitel

7 CVEs

1 in CISA KEV

Mitel 6900_series_sip_phones Vulnerabilities

Name: Mitel 6900_series_sip_phones vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for 6900_series_sip_phones by Mitel.

7

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.0

Avg CVSS

2024–2025

Last updated August 7, 2025

Overview

Mitel 6900_series_sip_phones has 7 published CVE records since 2024, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Mitel 6900_series_sip_phones, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Mitel 6900_series_sip_phones's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Mitel 6900_series_sip_phones's CVEs is confirmed exploited in the wild.

Public exploits

2

2 of Mitel 6900_series_sip_phones's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Mitel 6900_series_sip_phones version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 6.3 SP3 HF41 CVE
<= 6.3.31 CVE
<= r6.4.0hf11 CVE

Fixed in

> 6.3 SP3 HF41 CVE
> 6.3.31 CVE
> r6.4.0hf11 CVE

Find a version

7 CVEs

Sort

Medium vulnerability · 2025-08-07
CVE-2025-47188
Public exploit
CWE-77
Medium · CVSS 6.5
EPSS 47.6% (99th pct)2025-08-07
High vulnerability · 2025-07-23
CVE-2025-47187CWE-434
High · CVSS 7.5
EPSS 0.9% (54th pct)2025-07-23
Medium vulnerability · 2024-08-13
CVE-2024-41711
Patch
CWE-88
Medium · CVSS 6.8
EPSS 0.5% (42th pct)2024-08-13
High vulnerability · 2024-08-12
CVE-2024-41710
CISA KEV
Public exploit
Patch
CWE-88
Added to CISA KEV 2025-02-12
High · CVSS 8.5
EPSS 41.6% (99th pct)2024-08-12
Critical vulnerability · 2024-05-02
CVE-2024-31967
Patch
CWE-284
Critical · CVSS 9.1
EPSS 0.5% (37th pct)2024-05-02
Medium vulnerability · 2024-05-02
CVE-2024-31965CWE-20
Medium · CVSS 4.2
EPSS 0.2% (15th pct)2024-05-02
Medium vulnerability · 2024-05-02
CVE-2024-31963
Patch
CWE-120
Medium · CVSS 6.4
EPSS 0.3% (16th pct)2024-05-02

Common weakness types

The CWE weakness categories most often found in Mitel 6900_series_sip_phones CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Mitel 6900_series_sip_phones CVEs were published each year.

2024

5

2025

2

Other Mitel products

Browse vulnerabilities for other products by Mitel.

micollab49 CVEs mivoice connect23 CVEs micontact center business11 CVEs 6800_series_sip_phones8 CVEs connect onsite7 CVEs 6970_conference_unit6 CVEs micollab audio, web & video conferencing6 CVEs st14.26 CVEs

All Mitel vulnerabilities

Frequently asked questions

Common questions about Mitel 6900_series_sip_phones vulnerabilities.

How many CVEs does Mitel 6900_series_sip_phones have?: Mitel 6900_series_sip_phones has 7 published CVE records since 2024.
How many Mitel 6900_series_sip_phones CVEs are in CISA KEV?: Yes — 1 of Mitel 6900_series_sip_phones's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Mitel 6900_series_sip_phones vulnerabilities?: Yes — 2 of Mitel 6900_series_sip_phones's CVEs have a known public exploit.
Which versions of Mitel 6900_series_sip_phones are affected?: 6 distinct Mitel 6900_series_sip_phones versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Mitel 6900_series_sip_phones CVEs?: Mitel 6900_series_sip_phones's CVEs most often map to these CWE weakness types: CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control).
How many critical Mitel 6900_series_sip_phones vulnerabilities are there?: Mitel 6900_series_sip_phones has 1 critical and 2 high-severity CVEs.
What is the average severity of Mitel 6900_series_sip_phones CVEs?: The average CVSS base score across Mitel 6900_series_sip_phones's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Mitel 6900_series_sip_phones vulnerabilities

Monitor new Mitel 6900_series_sip_phones vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing