writeups.xyz / Remote code execution and elevation of local privileges in Mitel Unify OpenStage and OpenScape VoIP phones

Submitter : c2a

Date: 11 December 2023

Bounty : undisclosed

Vulnerabilities :

• VoIP
• RCE
• Missing Authentication
• MiTM
• Local Privilege Escalation

Programs :

• Mitel (Atos Unify)

Authors :

• Pentagrid (@Pentagridsec)

Link :
https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/