How severe is CVE-2024-41710?

CVE-2024-41710 has a CVSS 3.x base score of 7.2, rated high severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2024-41710 being actively exploited?

Yes. CVE-2024-41710 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2025-02-12, which means active exploitation has been confirmed. It should be prioritised for remediation.

What products are affected by CVE-2024-41710?

CVE-2024-41710 primarily affects Mitel 6970 Firmware. In total, 15 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2024-41710?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.

Does CVE-2024-41710 have an EU (EUVD) identifier?

Yes. CVE-2024-41710 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-39154. It is also flagged as exploited in the EUVD (since 2025-02-12).

When was CVE-2024-41710 published?

CVE-2024-41710 was published on 2024-08-12 and last updated on 2026-06-17.

CVE-2024-41710

CVE-2024-41710 is a high-severity vulnerability in Mitel 6970 Firmware with a CVSS 3.x base score of 7.2. It is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming it has been exploited in the wild (added 2025-02-12). The underlying weakness is classified as CWE-88.

Key facts

Severity: High (CVSS 3.x base score 7.2)
EPSS exploit prediction: 42% (99th percentile)
Actively exploited: Yes — listed in CISA KEV (added 2025-02-12)
EU (EUVD) id: EUVD-2024-39154
EU exploitation: Flagged exploited in the ENISA EU Vulnerability Database (since 2025-02-12)
Weakness: CWE-88
Affected product: Mitel 6970 Firmware
Published: 2024-08-12
Last modified: 2026-06-17

Description

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.

Frequently asked questions

What is CVE-2024-41710?: A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated attacker with administrative privilege to conduct an argument injection attack, due to insufficient parameter sanitization during the boot process. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.
How severe is CVE-2024-41710?: CVE-2024-41710 has a CVSS 3.x base score of 7.2, rated high severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2024-41710 being actively exploited?: Yes. CVE-2024-41710 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2025-02-12, which means active exploitation has been confirmed. It should be prioritised for remediation.
What products are affected by CVE-2024-41710?: CVE-2024-41710 primarily affects Mitel 6970 Firmware. In total, 15 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2024-41710?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.
Does CVE-2024-41710 have an EU (EUVD) identifier?: Yes. CVE-2024-41710 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-39154. It is also flagged as exploited in the EUVD (since 2025-02-12).
When was CVE-2024-41710 published?: CVE-2024-41710 was published on 2024-08-12 and last updated on 2026-06-17.

References

Affected products (15)

cpe:2.3:o:mitel:6970_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6940w_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6930w_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6920w_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6920_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6915_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6910_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6905_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6940_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6930_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6873i_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6869i_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6867i_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6865i_sip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:6863i_sip_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Mitel 6970 Firmware

CVE-2024-28066 — High (CVSS 8.8): In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
CVE-2020-13617 — High (CVSS 7.5): The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an…

All CVEs affecting Mitel 6970 Firmware →

Other CWE-88 (Argument Injection) vulnerabilities

CVE-2026-57572 — Critical (CVSS 10.0): Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted…
CVE-2026-40281 — Critical (CVSS 10.0): Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint…
CVE-2023-6269 — Critical (CVSS 10.0): An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify…
CVE-2007-0882 — Critical (CVSS 10.0): Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11)…
CVE-2004-0480 — Critical (CVSS 10.0): Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via…
CVE-1999-0113 — Critical (CVSS 10.0): Some implementations of rlogin allow root access if given a -froot parameter.

Browse all CWE-88 (Argument Injection) vulnerabilities →