The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13617
Reference (s):
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007
- https://www.mitel.com/support/security-advisories