Security Advisory

CVE-2020-27640

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-18 07:19:04
Last updated 2024-08-04 16:18:45
Assigner mitre
State PUBLISHED

Description

The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.