CVE-2018-15497

Name: CVE-2018-15497
Creator: NVD / NIST
Published: 2018-10-23T21:30:52.8+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.87%

Last modified Jun 17, 2026

CVE-2018-15497 is a vulnerability of currently unknown severity. The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote code execution.. EPSS estimates a 4.87% chance of exploitation in the next 30 days.

Description

The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote code execution.

Metrics

EPSS Probability

4.87%

90.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Mitel	Mivoice 5330e Firmware	<= 6.5.0.16

References

https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009Vendor Advisory
https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/Exploit, Third Party Advisory
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009Vendor Advisory
https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/Exploit, Third Party Advisory

Timeline

Published: Oct 23, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-15497?

How severe is CVE-2018-15497?

Severity scoring for CVE-2018-15497 is pending analysis. The EPSS model estimates a 4.87% probability of exploitation in the next 30 days.

How do I fix CVE-2018-15497?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-15497?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST