CVE-2024-41710

CVE-2024-41710 is an argument injection vulnerability affecting Mitel 6800, 6900, and 6900w Series SIP Phones, including the 6970 Conference Unit, up to R6.4.0.HF1. An authenticated attacker with administrative privileges can exploit insufficient parameter sanitization during the boot process to execute arbitrary commands. This vulnerability has a CVSS score of 7.2 (High) due to its network attack vector, low complexity, and high impact on confidentiality, integrity, and availability. Notably, it is actively exploited in the wild, with multiple media outlets reporting its use by botnets like Aquabot and Mirai for DDoS attacks. While no public exploit code is listed on Metasploit, Nuclei, or ExploitDB, the high EPSS score and extensive community discussion underscore its critical nature.