Exploit / PoCcritical
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-41713+2 related CVEs | Unauthenticated Path Traversal in Mitel MiCollab NuPoint Unified Messaging | 9.1 group max | 97% | KEVRansomware | KEV |
| CVE-2024-52544 | An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500) | 9.8 | 1% | ||
| CVE-2024-52548 | An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code | 6.7 | <1% | ||
| CVE-2024-55550 | Authenticated Path Traversal in Mitel MiCollab Enables Local File Reading | 2.7 | 38% | KEVRansomware | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 9.8.2.12 | vulnerabilities." It's worth noting that MiCollab 9.8 SP2 (9.8.2.12) also addresses a separate SQL injection vulnerability in t |
From the original article
3 min read at thehackernews.com
Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances. The critical vulnerability in question is CVE-2024-41713 (CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.