MiVB and phone 6930 firmware

[jonesng]

Hi

Im looking at Mitel Security advisories (i.e 24-0020) that relate to 6900 phones.
i.e. a vulnerability in version R6.4.HF1 (R6.4.0.136) is fixed in firmware R6.4.0.HF2 (R6.4.0.137)

However when I look at our 6930 phones, the phone info states:
Main Version 01.08.00.010
Model MiNet_6930 Rev10

To me that firmware version is completely different.

Would our devices be affected by the vulnerability?
Why does the phone show something different to version R6xxxx etc

Any guidance would be appreciated.  We have a MiVB setup

Thanks

[bojo387]

The 69XX phones support two FWs. SIP and MiNET.
The advisory is for those running SIP FW or when the phone is used with the other Mitel platforms such as MX-ONE, MiVO400, (and 3rd party systems)...
What you see on your phones is called MiNET firmware. It is a proprietary firmware stack for connection to MiVoice Business systems.

[jonesng]

Hi, Sorry for the delay in responding, many thanks for confirming this

[jmoss]

Mitel noob here. I do not know much about Mitel/MiCollab/MiVoice Business systems.

I am looking for Mitel 6930 MiNet firmware. We purchased a lot of used 6930 phones and are unable to flash with our firmware.

Here's what we we have (copied from the About section):

MiCollab 9.7.0.27-01
Mitel Standard Linux 11.0.103
OVA 9.7.0.27

Release level: 10.0 SP1
Active software load: 10.0.1.18 (21.0.1.47)
Platform: Industry Standard Server

[lundah]

The firmware is on the MiVB itself in /sysro/tftp

[acejavelin]

Mitel noob here. I do not know much about Mitel/MiCollab/MiVoice Business systems.

I am looking for Mitel 6930 MiNet firmware. We purchased a lot of used 6930 phones and are unable to flash with our firmware.

Here's what we we have (copied from the About section):

MiCollab 9.7.0.27-01
Mitel Standard Linux 11.0.103
OVA 9.7.0.27

Release level: 10.0 SP1
Active software load: 10.0.1.18 (21.0.1.47)
Platform: Industry Standard Server

Are these SIP or MiNET devices currently.

For MiNET, you don't normally flash your own firmware... if you point them at your controller it should automatically flash. Factory reset the device and reconnect it to a network that has proper DHCP options setup and the phone should flash on it's own.

For SIP devices, the firmware in on your system in the /sysro/tftp folder and if you just do a TFTP upgrade and point it to your controller and use the correct file name, it should just work.

[jmoss]

The devices were previously SIP and we operate on MiNET.
My co-worker was able to get a copy of the MiNET firmware from the previous owners of the devices.
(unfortunately the file is too large for me to attach here)