CVE-2024-37569

An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.

• CWE-77
• CWE-77

• https://github.com/kwburns/CVE/blob/main/Mitel/5.0.0.1018/code/exploit-provis.pyProduct
• https://github.com/kwburns/CVE/tree/main/Mitel/5.0.0.1018#authenticated-remote-command-execution-provisExploit, Third Party Advisory
• https://www.youtube.com/watch?v=I9TQqfP5qzMExploit
• https://github.com/kwburns/CVE/blob/main/Mitel/5.0.0.1018/code/exploit-provis.pyProduct
• https://github.com/kwburns/CVE/tree/main/Mitel/5.0.0.1018#authenticated-remote-command-execution-provisExploit, Third Party Advisory
• https://www.youtube.com/watch?v=I9TQqfP5qzMExploit

Published

Jun 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37563Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-37564Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2024-37565Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2024-37566Infoblox NIOS through 8.6.4 has Improper Authentication for …9.8
• CVE-2024-37567Infoblox NIOS through 8.6.4 has Improper Access Control for …9.1
• CVE-2024-37568lepture Authlib before 1.3.1 has algorithm confusion with as…7.5
• CVE-2024-3757in OpenHarmony v4.0.0 and prior versions allow a local attac…5.5
• CVE-2024-37570On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update …8.8
• CVE-2024-37571Buffer Overflow vulnerability in SAS Broker 9.2 build 1495 a…4.3
• CVE-2024-37573The Talkatone com.talkatone.android application 8.4.6 for An…8.4
• CVE-2024-37574The GriceMobile com.grice.call application 4.5.2 for Android…8.2
• CVE-2024-37575The Mister org.mistergroup.shouldianswer application 1.4.264…7.5