CVE-2020-27639 : The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with fir

The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.

Published 2020-12-18 08:15:15

Updated 2020-12-21 17:23:29

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-27639

Mitel » 6873i Sip Firmware
Versions before (<) 5.1.0
cpe:2.3:o:mitel:6873i_sip_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6873i Sip Firmware » Version: 5.1.0
cpe:2.3:o:mitel:6873i_sip_firmware:5.1.0:-:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6873i Sip Firmware » Version: 5.1.0 Update SP1
cpe:2.3:o:mitel:6873i_sip_firmware:5.1.0:sp1:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6873i Sip Firmware » Version: 5.1.0 Update SP2
cpe:2.3:o:mitel:6873i_sip_firmware:5.1.0:sp2:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6873i Sip Firmware » Version: 5.1.0 Update SP3
cpe:2.3:o:mitel:6873i_sip_firmware:5.1.0:sp3:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6873i Sip Firmware » Version: 5.1.0 Update SP4
cpe:2.3:o:mitel:6873i_sip_firmware:5.1.0:sp4:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6873i Sip Firmware » Version: 5.1.0 Update SP5
cpe:2.3:o:mitel:6873i_sip_firmware:5.1.0:sp5:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6873i Sip » Version: N/A
Mitel » 6930 Sip Firmware
Versions before (<) 5.1.0
cpe:2.3:o:mitel:6930_sip_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6930 Sip Firmware » Version: 5.1.0
cpe:2.3:o:mitel:6930_sip_firmware:5.1.0:-:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6930 Sip Firmware » Version: 5.1.0 Update SP1
cpe:2.3:o:mitel:6930_sip_firmware:5.1.0:sp1:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6930 Sip Firmware » Version: 5.1.0 Update SP2
cpe:2.3:o:mitel:6930_sip_firmware:5.1.0:sp2:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6930 Sip Firmware » Version: 5.1.0 Update SP3
cpe:2.3:o:mitel:6930_sip_firmware:5.1.0:sp3:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6930 Sip Firmware » Version: 5.1.0 Update SP4
cpe:2.3:o:mitel:6930_sip_firmware:5.1.0:sp4:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6930 Sip Firmware » Version: 5.1.0 Update SP5
cpe:2.3:o:mitel:6930_sip_firmware:5.1.0:sp5:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6930 Sip » Version: N/A
Mitel » 6940 Sip Firmware
Versions before (<) 5.1.0
cpe:2.3:o:mitel:6940_sip_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A
Mitel » 6940 Sip Firmware » Version: 5.1.0
cpe:2.3:o:mitel:6940_sip_firmware:5.1.0:-:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A
Mitel » 6940 Sip Firmware » Version: 5.1.0 Update SP1
cpe:2.3:o:mitel:6940_sip_firmware:5.1.0:sp1:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A
Mitel » 6940 Sip Firmware » Version: 5.1.0 Update SP2
cpe:2.3:o:mitel:6940_sip_firmware:5.1.0:sp2:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A
Mitel » 6940 Sip Firmware » Version: 5.1.0 Update SP3
cpe:2.3:o:mitel:6940_sip_firmware:5.1.0:sp3:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A
Mitel » 6940 Sip Firmware » Version: 5.1.0 Update SP4
cpe:2.3:o:mitel:6940_sip_firmware:5.1.0:sp4:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A
Mitel » 6940 Sip Firmware » Version: 5.1.0 Update SP5
cpe:2.3:o:mitel:6940_sip_firmware:5.1.0:sp5:*:*:*:*:*:*
Matching versions
When used together with: Mitel » 6940 Sip » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-27639

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 29 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-27639

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.8	MEDIUM	AV:A/AC:L/Au:N/C:P/I:N/A:P	6.5	4.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: Partial
8.1	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	2.8	5.2	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: High

References for CVE-2020-27639

https://www.mitel.com/support/security-advisories

Security Advisories
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-27639

Products affected by CVE-2020-27639

Exploit prediction scoring system (EPSS) score for CVE-2020-27639

CVSS scores for CVE-2020-27639

References for CVE-2020-27639