CVE-2024-41713—Mitel MiCollab Path Traversal Vulnerability

Vulnerability Name

Mitel MiCollab Path Traversal Vulnerability

Description

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029
• https://nvd.nist.gov/vuln/detail/CVE-2024-41713

Related News Articles

• Mitel warns of critical MiVoice MX-ONE authentication bypass flawJuly 24, 2025
• Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware DeliveryApril 21, 2025
• Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackersJanuary 8, 2025
• CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active ExploitationJanuary 8, 2025
• CISA warns of critical Oracle, Mitel flaws exploited in attacksJanuary 7, 2025

Related Weaknesses

• CWE-22