Known Exploited Vulnerabilities January 07, 2025 · CISA KEV Catalog

CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-41713 Mitel
Related: CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability Known Exploited Vulnerabilities · Feb 12, 2025
CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability Known Exploited Vulnerabilities · Jan 07, 2025
CVE-2022-40765: Mitel MiVoice Connect Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 21, 2023