VULNERABILITY INTELLIGENCE

CVE-2020-27640

CVSS score8.1 HIGH
EPSS probability0.52%
CISA KEVNot currently listed
Published2020-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Description

The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references