What is the CVSS score of CVE-2020-13617?

CVE-2020-13617 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.3%.

6863 Firmware CVE-2020-13617

HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2020-08-26 cve@mitre.org

Information Disclosure 6863 Firmware 6865 Firmware 6867 Firmware 6869 Firmware 6873 Firmware 6940 Firmware 6970 Firmware 6930 Firmware 6920 Firmware 6905 Firmware 6910 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Aug 26, 2020 - 18:15 nvd

HIGH 7.5

DescriptionNVD

AnalysisAI

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-307. The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts. Affected products include: Mitel 6863 Firmware, Mitel 6865 Firmware, Mitel 6867 Firmware, Mitel 6869 Firmware, Mitel 6873 Firmware. Version information: before 5.1.0..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.