CVE-2024-37570

Summary

CVE-2024-37570 is a vulnerability affecting Mitel 6869i devices running firmware version 4.5.0.41. The issue lies in the Manual Firmware Update page, where the username and path parameters, sent by an authenticated user, are not properly sanitized before being appended to the busybox ftpget command. Consequently, attackers can execute $() commands, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.