VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Mar 2, 2020· Updated Jun 17, 2026

CVE-2019-18863

CVE-2019-18863

Description

A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

26
  • Mitel/6863i Firmware3 versions
    cpe:2.3:o:mitel:6863i_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6863i_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6863i_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6863i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6865i Firmware3 versions
    cpe:2.3:o:mitel:6865i_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6865i_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6865i_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6865i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6867i Firmware3 versions
    cpe:2.3:o:mitel:6867i_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6867i_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6867i_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6867i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6869i Firmware3 versions
    cpe:2.3:o:mitel:6869i_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6869i_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6869i_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6869i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6873i Firmware3 versions
    cpe:2.3:o:mitel:6873i_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6873i_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6873i_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6873i_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6920 Firmware3 versions
    cpe:2.3:o:mitel:6920_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6920_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6920_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6920_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6930 Firmware3 versions
    cpe:2.3:o:mitel:6930_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6930_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6930_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6930_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6940 Firmware3 versions
    cpe:2.3:o:mitel:6940_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mitel:6940_firmware:*:*:*:*:*:*:*:*range: <5.1.0.2051
    • cpe:2.3:o:mitel:6940_firmware:5.1.0.2051:-:*:*:*:*:*:*
    • cpe:2.3:o:mitel:6940_firmware:5.1.0.2051:sp2_hf2:*:*:*:*:*:*
  • Mitel/6800 and 6900 SIP series phonesdescription
  • Mitel/6900w Series SIP Phonesllm-fuzzy
    Range: <=5.1.0.2051 SP2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.