{"id":86681,"date":"2026-03-14T00:15:41","date_gmt":"2026-03-14T00:15:41","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-47187-unauthenticated-file-upload-vulnerability-in-mitel-sip-phones","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-47187-unauthenticated-file-upload-vulnerability-in-mitel-sip-phones\/","title":{"rendered":"CVE-2025-47187: Unauthenticated File Upload Vulnerability in Mitel SIP Phones<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-47187 vulnerability affects the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones and the 6970 Conference Unit. If exploited, this vulnerability could allow an attacker to upload arbitrary WAV files, potentially exhausting the phone’s storage without affecting its operation. This report evaluates the nature of this vulnerability, its potential risks, and how it can be mitigated.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-47187
\nSeverity: High (7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n