CVE-2018-15497

The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote code execution.

• CWE-119

• https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009Vendor Advisory
• https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/Exploit, Third Party Advisory
• https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009Vendor Advisory
• https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/Exploit, Third Party Advisory

Published

Oct 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15490An issue was discovered in ExpressVPN on Windows. The Xvpnd.…
• CVE-2018-15491A vulnerability in the permission and encryption implementat…
• CVE-2018-15492A vulnerability in the lservnt.exe component of Sentinel Lic…
• CVE-2018-15493vBulletin 5.4.3 has an Open Redirect.
• CVE-2018-15494In Dojo Toolkit before 1.14, there is unescaped string injec…
• CVE-2018-15495/filemanager/upload.php in Responsive FileManager before 9.1…
• CVE-2018-15498YSoft SafeQ Server 6 allows a replay attack.
• CVE-2018-15499GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0…
• CVE-2018-1550IBM Spectrum Protect 7.1 and 8.1 could allow a local user to…6.2
• CVE-2018-15501In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6…7.5
• CVE-2018-15502Insecure permissions in Lone Wolf Technologies loadingDOCS 2…
• CVE-2018-15503The unpack implementation in Swoole version 4.0.4 lacks corr…