High severity8.8NVD Advisory· Published Apr 8, 2024· Updated Jun 17, 2026
CVE-2024-28066
CVE-2024-28066
Description
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16- cpe:2.3:o:mitel:700d_dect_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- cpe:2.3:o:mitel:openscape_cp110_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- cpe:2.3:o:mitel:openscape_cp210_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- cpe:2.3:o:mitel:openscape_cp410_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- cpe:2.3:o:mitel:openscape_cp710_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- cpe:2.3:o:mitel:openscape_cpx10_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- cpe:2.3:o:mitel:openscape_dect_firmware:*:*:*:*:*:*:*:*Range: >=1.10.4.3,<1.11.3.0
- Unify/CP IP Phone firmwaredescription
- Range: 1.10.4.3
Patches
Vulnerability mechanics
References
2- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-008.txtnvdExploitThird Party Advisory
- syss.denvdNot Applicable
News mentions
0No linked articles in our index yet.