CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
Other sources
Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41713?
CVE-2024-41713 is rated as a high severity vulnerability due to its potential for allowing unauthorized access through a path traversal attack.
How do I fix CVE-2024-41713?
To address CVE-2024-41713, ensure that your Mitel MiCollab system is updated to the latest version beyond 9.8 SP1 FP2 (9.8.1.201) that includes security patches.
What is the impact of CVE-2024-41713?
CVE-2024-41713 can allow unauthenticated attackers to gain unauthorized access to files on the system due to insufficient input validation.
Which software versions are affected by CVE-2024-41713?
CVE-2024-41713 affects Mitel MiCollab versions up to and including 9.8 SP1 FP2 (9.8.1.201).
Is there a known exploit for CVE-2024-41713?
Yes, there is proof-of-concept exploit code available for CVE-2024-41713, which demonstrates how the path traversal vulnerability can be executed.