FKIE_CVE-2003-20001

Vulnerability from fkie_nvd - Published: 2025-04-01 21:15 - Updated: 2025-04-04 21:15
Severity ?
5.6 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Summary
An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges information about the call and any SMDR records generated by the system. The information provided includes the service type, extension number and other parameters, related to the call activity.
References
cve@mitre.orghttp://olografix.org/acme/mitel.txt
cve@mitre.orghttps://packetstorm.news/files/id/31445
cve@mitre.orghttps://rb.gy/1smt22
cve@mitre.orghttps://www.exploit-db.com/exploits/49176
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges information about the call and any SMDR records generated by the system. The information provided includes the service type, extension number and other parameters, related to the call activity."
    },
    {
      "lang": "es",
      "value": "Se detect\u00f3 un problema en los dispositivos Mitel ICP VoIP 3100. Cuando un usuario remoto intenta iniciar sesi\u00f3n por TELNET durante el tiempo de espera y entra una llamada externa, el sistema divulga incorrectamente informaci\u00f3n sobre la llamada y cualquier registro SMDR generado por el sistema. Esta informaci\u00f3n incluye el tipo de servicio, el n\u00famero de extensi\u00f3n y otros par\u00e1metros relacionados con la actividad de la llamada."
    }
  ],
  "id": "CVE-2003-20001",
  "lastModified": "2025-04-04T21:15:40.577",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.6,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.4,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-04-01T21:15:40.450",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://olografix.org/acme/mitel.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://packetstorm.news/files/id/31445"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://rb.gy/1smt22"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/49176"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.