Americas
Oceania
+32 2727 1811
+32 2727 1811
Contact Center
Samenwerken
Zakelijke telefoonsystemen
Devices & accessoires
Vragen of opmerkingen?
+32 2727 1811
Uw zakelijke behoefte
Uw branche
Organisatiegrootte
Onze diensten
Onze producten
Support voor klanten
Partner support
Training
Contact
Blog
Over Mitel
Vacatures
Case studies
Resource center
Locatie: België (NL)
Advisory ID: 20-0009
Publish Date: 2020-07-07
Last Updated: 2020-07-07
Revision: 1.0
Point-to-Point Protocol (PPP) Daemon process which can be configured in Mitel Border Gateway is vulnerable to a buffer overflow vulnerability. By sending an unsolicited EAP packet to a vulnerable PPP client or server, an unauthenticated remote attacker could cause memory corruption in the PPP daemon process, which may allow for arbitrary code execution.
PPP Daemon is not enabled by default in MBG. Mitel partners/customers who have enabled this service should update to the latest release.
Product Name | Product Version | Security Bulletin | Last Updated |
---|---|---|---|
Mitel Border Gateway (MBG) | MBG 11.0 and earlier | 20-0009-001 | 2020-07-07 |
Mitel has issued new releases of the affected software.
PPP Daemon is not enabled by default in MBG. Mitel partners/customers who have enabled this service should update to the latest version.
Customers are advised to review the product Security Bulletin. For further information, please refer to the Knowledge Base article in OneView partner portal or contact Product Support.
CVE-2020-8597
Version | Date | Description |
---|---|---|
1.0 | 2020-07-07 | Initial version |
VERSION | DATE | DESCRIPTION |
VERSION | DATE | DESCRIPTION |
VERSION | DATE | DESCRIPTION |
VERSION | DATE | DESCRIPTION |