CVE-2024-41710
Actively exploited. CVE-2024-41710 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2025-02-12) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.
CSIRTS triage
- What
- Mitel SIP Phones contain an argument injection vulnerability that may allow an attacker to execute arbitrary commands.
- Who is affected
- Users of Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones.
- Urgency
- Remediation is critical due to active exploitation and the potential for severe impact.
- Action
- Apply the latest firmware updates for the affected Mitel SIP Phones.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2024-41710
Get an email if CVE-2024-41710 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 99% of all EPSS-scored CVEs.
Advisory coverage (1)
- criticalexploitedCVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerabilitycisa-kev · 2025-02-12
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2024-41710)