CVE-2024-41713
CVE-2024-41713
In short
A flaw in Mitel MiCollab's messaging system allows attackers to bypass security and access files they shouldn't, potentially viewing or deleting user data and system settings without needing a password.
Technical detail
Path traversal vulnerability in NuPoint Unified Messaging component due to insufficient input validation permits unauthenticated attackers to access arbitrary files on the system. Exploitation enables unauthorized data access, modification, and deletion of user information and critical configurations.
Summary generated and translated by AI from the official description.
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
n/a · n/apublic PoCs found — 5
githubgithub.com/watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713★ 19githubgithub.com/zxj-hub/CVE-2024-41713POC★ 0githubgithub.com/Sanandd/cve-2024-CVE-2024-41713★ 0githubgithub.com/amanverma-wsu/CVE-2024-41713-Scan★ 0githubgithub.com/gunyakit/CVE-2024-41713-PoC-exploit★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →