CVE-2003-20001
Last modified
CVE-2003-20001 is a medium-severity vulnerability rated 5.6/10 on the CVSS scale. An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges information about the call and any SMDR records generated by the system. EPSS estimates a 1.41% chance of exploitation in the next 30 days.
Description
An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges information about the call and any SMDR records generated by the system. The information provided includes the service type, extension number and other parameters, related to the call activity.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2003-20001?
How severe is CVE-2003-20001?
How do I fix CVE-2003-20001?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2003
- CVE-2003-1600Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2003-1601Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2003-1602Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2003-1603GE Healthcare Discovery VH has a default password of (1) int…
- CVE-2003-1604The redirect_target function in net/ipv4/netfilter/ipt_REDIR…
- CVE-2003-1605curl 7.x before 7.10.7 sends CONNECT proxy credentials to th…
- CVE-2003-5001A vulnerability was found in ISS BlackICE PC Protection and …9.8
- CVE-2003-5002A vulnerability was found in ISS BlackICE PC Protection. It …5.3
- CVE-2003-5003A vulnerability was found in ISS BlackICE PC Protection. It …6.1
- CVE-2003-5004Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
Are you affected by CVE-2003-20001?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
