CVE-2025-47188 PoC — Mitel多款产品安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-47188.yaml

Associated Vulnerability

Title:Mitel多款产品安全漏洞 (CVE-2025-47188)
Description:Mitel 6800 Series等都是加拿大敏迪（Mitel）公司的一系列电话。 Mitel多款产品存在安全漏洞，该漏洞源于参数清理不足，可能导致命令注入攻击。以下产品及版本受到影响：Mitel 6800 Series、6900 Series和6900w Series SIP Phones 6.4 SP4及之前版本。

Description

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. This template should be run on port 49249/tcp.

File Snapshot


 id: CVE-2025-47188

info:
  name: Mitel 6000 - OS Command Injection
  severity: critical
  author: m

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-47188 PoC — Mitel多款产品 安全漏洞