CVE-2024-31967: Improper Access Control
Source CVE Database V5
Not known to be exploited · CVSS 9.1 Critical.
Data as of 26 Oct 2026, 10:12 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 39% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitation evidence
Disclosed: evidence found.
CVE published 2 May 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Monitor Mitel’s official security advisories and apply firmware updates or patches as soon as they become available to address CVE-2024-31967.
- Until patches are released, restrict network access to affected devices by implementing network segmentation and firewall rules that limit SIP phone management interfaces to trusted administrative networks only.
- Disable any unnecessary remote management features on the affected devices to reduce the attack surface.
- Implement strong network monitoring to detect unusual access patterns or unauthorized configuration changes on Mitel devices.
- Use VPNs or secure tunnels for remote access to telephony infrastructure to prevent direct exposure to the internet.
- Conduct regular security audits and penetration testing focused on telephony systems to identify and remediate potential weaknesses.
- Educate IT and security teams about this vulnerability to ensure rapid response and mitigation in case of attempted exploitation.
Description
A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A successful exploit could allow an attacker to gain unauthorized access to user information or the system configuration.