#mitel — Public Fediverse posts

#DuckDuckFedi How does one connect a #Mitel #DECT handset to a home base station ? The station only has a "pairing" button and knows nothing about an author code or the IPEI. Maybe folks from @eventphone ?

Mitel patches critical MiVoice MX-ONE Auth bypass flaw – Source: securityaffairs.com https://ciso2ciso.com/mitel-patches-critical-mivoice-mx-one-auth-bypass-flaw-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #MiVoiceMXONE #SecurityNews #hackingnews #Security #hacking #Mitel

Mitel Patches Critical Flaw in Enterprise Communication Platform https://www.securityweek.com/mitel-patches-critical-flaw-in-enterprise-communication-platform/ #Vulnerabilities #vulnerability #Mitel

Mitel Patches Critical Flaw in Enterprise Communication Platform https://www.securityweek.com/mitel-patches-critical-flaw-in-enterprise-communication-platform/ #Vulnerabilities #vulnerability #Mitel

What I really hate is computer that get firmware updates only when you have a license.
Looking at https://www.mitel.com/ currently.

Have a used Mitel SIP phone with old old firmware and can not update the firmware as I can not find firmware files.
#mitel

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking – Source: www.securityweek.com https://ciso2ciso.com/critical-vulnerability-exposes-many-mitel-micollab-instances-to-remote-hacking-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #Vulnerability #securityweek #FEATURED #MiCollab #Mitel

Okay, holy shit #mitel. Ich habe gerade das 632d ausgeschaltet aus der Kiste gefischt um es für die GPN schonmal zu laden. War zuletzt beim 38C3 im Einsatz. Das behauptet ernsthaft noch einen vollen Akku zu haben. Sowas kennt man von neueren Geräten einfach mal gar nicht mehr. 🫠

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking https://www.securityweek.com/critical-vulnerability-exposes-many-mitel-micollab-instances-to-remote-hacking/ #Vulnerabilities #vulnerability #Featured #MiCollab #Mitel

Critical Vulnerability Exposes Many Mitel MiCollab Instances to Remote Hacking https://www.securityweek.com/critical-vulnerability-exposes-many-mitel-micollab-instances-to-remote-hacking/ #Vulnerabilities #vulnerability #Featured #MiCollab #Mitel

#BSI WID-SEC-2025-1109: [NEU] [mittel] #Mitel #OpenScape #Xpressions: Schwachstelle ermöglicht Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mitel OpenScape Xpressions ausnutzen, um Informationen offenzulegen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1109

#Mitel #SIP-Phones lassen sich beliebige Befehle unterjubeln | Security https://www.heise.de/news/Mitel-SIP-Phones-lassen-sich-beliebige-Befehle-unterjubeln-10376625.html #VoIP #Patchday

Mitel formally filed for Chapter 11 bankruptcy protection on Monday, citing "macroeconomic challenges" as the company hopes to maintain its position within the unified communications (UC) space.

https://www.computing.co.uk/news-network/2025/mitel-files-for-bankruptcy

#technews #mitel #bankruptcy #uc

#Mirai-Botnetz: Angreifer attackieren #Zyxel-Router und #Mitel-SIP-Phones | Security https://www.heise.de/news/Mirai-Botnetz-Angreifer-attackieren-Zyxel-Router-und-Mitel-SIP-Phones-10261786.html #Patchday #Botnet #Malware #Aquabot

Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet – Source: go.theregister.com https://ciso2ciso.com/why-is-my-mitel-phone-ddosing-strangers-oh-it-was-roped-into-a-new-mirai-botnet-source-go-theregister-com/ #rssfeedpostgeneratorecho #TheRegisterSecurity #CyberSecurityNews #TheRegister #Mitel

Aquabot Botnet Targeting Vulnerable Mitel Phones – Source: www.securityweek.com https://ciso2ciso.com/aquabot-botnet-targeting-vulnerable-mitel-phones-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #Exploited #Aquabot #botnet #Mirai #Mitel

Aquabot Botnet Targeting Vulnerable Mitel Phones https://www.securityweek.com/aquabot-botnet-targeting-vulnerable-mitel-phones/ #Malware&Threats #exploited #Aquabot #botnet #Mirai #Mitel

Aquabot Botnet Targeting Vulnerable Mitel Phones https://www.securityweek.com/aquabot-botnet-targeting-vulnerable-mitel-phones/ #Malware&Threats #exploited #Aquabot #botnet #Mirai #Mitel

CISA adds critical Mitel and Oracle vulnerabilities to exploited list

Exploitation could allow attackers to gain unauthorised access to an organisation's entire unified communications infrastructure

https://www.computing.co.uk/news/2025/security/cisa-adds-critical-mitel-and-oracle-vulnerabilities-to-exploited-list

#infosec #cybcersecurity #technews #mitel #oracle #cisa #kev

Mitel 0-day, 5-year-old Oracle RCE bug under active exploit – Source: go.theregister.com https://ciso2ciso.com/mitel-0-day-5-year-old-oracle-rce-bug-under-active-exploit-source-go-theregister-com/ #rssfeedpostgeneratorecho #TheRegisterSecurity #CyberSecurityNews #TheRegister #Mitel

CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-mitel-micollab-vulnerabilities-exploited-in-attacks-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #Exploited #FEATURED #MiCollab #CISAKEV #Mitel

Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers https://www.helpnetsecurity.com/2025/01/08/mitel-micollab-oracle-weblogic-server-vulnerabilities-exploited-by-attackers/ #OracleWebLogic #vulnerability #enterprise #Don'tmiss #Hotstuff #Mitel #News #CISA

CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks https://www.securityweek.com/cisa-warns-of-mitel-micollab-vulnerabilities-exploited-in-attacks/ #Vulnerabilities #exploited #Featured #MiCollab #CISAKEV #Mitel

CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks https://www.securityweek.com/cisa-warns-of-mitel-micollab-vulnerabilities-exploited-in-attacks/ #Vulnerabilities #exploited #Featured #MiCollab #CISAKEV #Mitel

What in the world happened to my #aastra / #mitel 612d dect handset and can this be recovered?

PoC Exploit Published for Unpatched Mitel MiCollab Vulnerability – Source: www.securityweek.com https://ciso2ciso.com/poc-exploit-published-for-unpatched-mitel-micollab-vulnerability-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #Vulnerability #securityweek #Mitel #PoC

Mitel MiCollab zero-day and PoC exploit unveiled https://www.helpnetsecurity.com/2024/12/05/mitel-micollab-zero-day-and-poc-exploit-unveiled/ #collaboration #enterprise #Don'tmiss #WatchTowr #Hotstuff #0-day #Mitel #News #CVE #PoC

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

DDoSers use new method capable of amplifying traffic by a factor of 4 billion - Enlarge (credit: Getty Images)

Cybercriminals who use giant fl... - https://arstechnica.com/?p=1839527 #distributeddenialofservice #amplification #biz&it #mitel #ddos