Security
Loading…

CVE-2024-41713

CRITICALCVSS 9.1Known Exploited
Description

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

Timeline
Published:October 21st, 2024 9:15 PM
Last modified:August 4th, 2026 5:16 AM
Added to KEV:January 7th, 2025
CVSS Scoring

CVSS v3: 9.1 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Software
From NVD CPE configuration data

Vendors

mitel

Products

micollab
Weaknesses (CWE)

Source: NIST NVD · Data may lag official sources by up to one minute