Known Exploited Vulnerability
9.1
CRITICAL
CVE-2024-41713
Mitel MiCollab Path Traversal Vulnerability - [Actively Exploited]
Description

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.

INFO

Published Date :

Oct. 21, 2024, 9:15 p.m.

Last Modified :

Jan. 8, 2025, 8:31 p.m.

Remotely Exploitable :

Yes !

Impact Score :

5.2

Exploitability Score :

3.9
CISA Notification
CISA KEV (Known Exploited Vulnerabilities)

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.

Description :

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

Required Action :

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes :

https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-41713

Public PoC/Exploit Available at Github

CVE-2024-41713 has a 10 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2024-41713 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Mitel micollab
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-41713.

URL Resource
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This tool is for educational purposes and authorized testing only. Unauthorized usage is unethical and illegal.

Python

Updated: 1 week, 2 days ago
0 stars 0 fork 0 watcher
Born at : Jan. 11, 2025, 2:39 a.m. This repo has been linked 1 different CVEs too.

A repo for output of an experimental intrusion prediction project

Updated: 1 week, 5 days ago
0 stars 0 fork 0 watcher
Born at : Jan. 4, 2025, 1:44 a.m. This repo has been linked 4 different CVEs too.

A collection of Vulnerability Research and Reverse Engineering writeups.

Updated: 4 weeks, 2 days ago
0 stars 0 fork 0 watcher
Born at : Dec. 21, 2024, 2:55 p.m. This repo has been linked 48 different CVEs too.

cve-2024-CVE-2024-41713

Python

Updated: 4 weeks, 2 days ago
0 stars 0 fork 0 watcher
Born at : Dec. 21, 2024, 9:35 a.m. This repo has been linked 1 different CVEs too.

Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞,并且输入验证不足,未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击,成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围:version < MiCollab 9.8 SP2 (9.8.2.12)

Python

Updated: 4 weeks, 2 days ago
0 stars 0 fork 0 watcher
Born at : Dec. 21, 2024, 2:26 a.m. This repo has been linked 1 different CVEs too.

Two critical vulnerabilities have been discovered in Mitel MiCollab, a popular unified communication platform. These flaws can allow attackers to gain unauthorized access to sensitive files and perform administrative actions

Python

Updated: 1 month, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : Dec. 6, 2024, 11:21 a.m. This repo has been linked 1 different CVEs too.

None

Python

Updated: 1 month, 1 week ago
10 stars 5 fork 5 watcher
Born at : Dec. 5, 2024, 6:13 a.m. This repo has been linked 1 different CVEs too.

None

Shell

Updated: 1 month, 3 weeks ago
0 stars 0 fork 0 watcher
Born at : July 25, 2024, 12:43 p.m. This repo has been linked 4 different CVEs too.

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

cisa-kev vulnerability 0day cisa exploits

Updated: 1 month, 2 weeks ago
548 stars 35 fork 35 watcher
Born at : April 19, 2022, 8:58 a.m. This repo has been linked 1228 different CVEs too.

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

security cve exploit poc vulnerability

Updated: 1 month, 2 weeks ago
6566 stars 1140 fork 1140 watcher
Born at : Dec. 8, 2019, 1:03 p.m. This repo has been linked 958 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-41713 vulnerability anywhere in the article.

  • Help Net Security
Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Ivanti Connect Secure zero-day exploited by attackers (CVE-2025-0282) Ivanti has fixed two vulnerabili ... Read more

Published Date: Jan 12, 2025 (1 week, 1 day ago)
  • The Register
Mitel 0-day, 5-year-old Oracle RCE bug under active exploit

Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw – and a critical remote code execution vulnerability in Oracle WebLogic Server that has been abu ... Read more

Published Date: Jan 08, 2025 (1 week, 5 days ago)
  • Help Net Security
Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers

CISA has added Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic Server (CVE-2020-2883) vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The Mitel MiCollab vulne ... Read more

Published Date: Jan 08, 2025 (1 week, 5 days ago)
  • The Hacker News
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation

Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three flaws impacting Mitel MiCollab and Oracle WebLogic Server to its Known Exploite ... Read more

Published Date: Jan 08, 2025 (1 week, 5 days ago)
  • Cybersecurity News
CISA Alerts on Actively Exploited Vulnerabilities in Mitel MiCollab and Oracle WebLogic Server

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to organizations about three actively exploited security flaws impacting Mitel and Oracle systems. These vulner ... Read more

Published Date: Jan 08, 2025 (1 week, 5 days ago)
  • TheCyberThrone
CISA KEV UPDATE Part I – January 2025

The US CISA has added 3  vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on the evidence of active exploitation.CVE-2024-41713: Mitel MiCollab Path Traversal VulnerabilityDe ... Read more

Published Date: Jan 08, 2025 (1 week, 6 days ago)
  • BleepingComputer
CISA warns of critical Oracle, Mitel flaws exploited in attacks

CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are actively exploited in attacks. The cybersec ... Read more

Published Date: Jan 07, 2025 (1 week, 6 days ago)
  • The Hacker News
⚡ THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2 - 8)

Cyber Threats / Weekly Recap This week's cyber world is like a big spy movie. Hackers are breaking into other hackers' setups, sneaky malware is hiding in popular software, and AI-powered scams are tr ... Read more

Published Date: Dec 09, 2024 (1 month, 1 week ago)
  • Help Net Security
Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam plugs serious holes in Service Provider Console (CVE-2024-42448, CVE-2024-42449) Veeam has fixed ... Read more

Published Date: Dec 08, 2024 (1 month, 1 week ago)
  • The Register
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files

updated A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive files on vulnerable ins ... Read more

Published Date: Dec 06, 2024 (1 month, 2 weeks ago)
  • Dark Reading
Bypass Bug Revives Critical N-Day in Mitel MiCollab

Source: Kristoffer Tripplaar via Alamy Stock PhotoTwo new vulnerabilities in Mitel's MiCollab unified communications and collaboration (UCC) platform could help expose gobs of enterprise data.MiCollab ... Read more

Published Date: Dec 05, 2024 (1 month, 2 weeks ago)
  • security.nl
Exploit gepubliceerd voor overnemen Mitel MiCollab communicatieplatform

Een securitybedrijf heeft proof-of-concept exploitcode gepubliceerd waarmee Mitel MiCollab-servers zijn over te nemen. De exploit maakt gebruik van twee kwetsbaarheden. Voor één van de beveiligingslek ... Read more

Published Date: Dec 05, 2024 (1 month, 2 weeks ago)
  • The Hacker News
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access

Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, grant ... Read more

Published Date: Dec 05, 2024 (1 month, 2 weeks ago)
  • Help Net Security
Mitel MiCollab zero-day and PoC exploit unveiled

A zero-day vulnerability in the Mitel MiCollab enterprise collaboration suite can be exploited to read files containing sensitive data, watchTowr researcher Sonny Macdonald has disclosed, and followed ... Read more

Published Date: Dec 05, 2024 (1 month, 2 weeks ago)
  • BleepingComputer
Mitel MiCollab zero-day flaw gets proof-of-concept exploit

Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server's filesystem. Mitel MiCollab is an enterprise co ... Read more

Published Date: Dec 05, 2024 (1 month, 2 weeks ago)
  • Cybersecurity News
WhatsUp Gold Users Beware: Critical Authentication Bypass Flaw Exposed – CVE-2024-7763 (CVSS 9.8)

Progress Software has disclosed a severe new vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to potential cyberattacks by allowing unauthorized acces ... Read more

Published Date: Oct 28, 2024 (2 months, 3 weeks ago)
  • Cybersecurity News
OneDev DevOps Platform Patches Critical Security Flaw Exposing Sensitive Data – (CVE-2024-45309)

A critical security vulnerability (CVE-2024-45309) has been discovered and patched in OneDev, a popular open-source DevOps platform. This vulnerability could have allowed unauthenticated attackers to ... Read more

Published Date: Oct 22, 2024 (2 months, 4 weeks ago)
  • Cybersecurity News
CVE-2024-21216 (CVSS 9.8): Oracle WebLogic Flaw That Could Give Attackers Full Control

Oracle has recently rolled out its October 2024 Critical Patch Update (CPU), addressing 329 vulnerabilities across a variety of products. Among these are five severe vulnerabilities within the Oracle ... Read more

Published Date: Oct 21, 2024 (3 months ago)
  • Cybersecurity News
CVE-2024-9634 (CVSS 9.8): Critical GiveWP Flaw Exposes 100,000+ WordPress Sites to RCE

A critical security vulnerability (CVE-2024-9634) has been discovered and patched in GiveWP, a popular WordPress donation plugin with over 100,000 active installations. The flaw, a PHP Object Injectio ... Read more

Published Date: Oct 16, 2024 (3 months ago)
  • Cybersecurity News
CVE-2024-9921 (CVSS 9.8): Critical Flaw Found in Popular Business Collaboration Tool Team+

In a recent vulnerability note issued by TWCERT/CC (Taiwan Computer Emergency Response Team / Coordination Center), three significant security vulnerabilities have been identified in Team+, a popular ... Read more

Published Date: Oct 15, 2024 (3 months ago)

The following table lists the changes that have been made to the CVE-2024-41713 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Jan. 08, 2025

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    Added CWE NIST CWE-22
    Added CPE Configuration OR *cpe:2.3:a:mitel:micollab:*:*:*:*:*:-:*:* versions up to (including) 9.8.1.201
    Changed Reference Type https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 No Types Assigned https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 Vendor Advisory
  • CVE CISA KEV Update by 9119a7d8-5eab-497f-8521-727c672e3725

    Jan. 08, 2025

    Action Type Old Value New Value
    Added Date Added 2025-01-07
    Added Due Date 2025-01-28
    Added Required Action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
    Added Vulnerability Name Mitel MiCollab Path Traversal Vulnerability
  • CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Dec. 09, 2024

    Action Type Old Value New Value
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    Removed CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Oct. 22, 2024

    Action Type Old Value New Value
    Added CWE CISA-ADP CWE-22
    Added CVSS V3.1 CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • CVE Received by [email protected]

    Oct. 21, 2024

    Action Type Old Value New Value
    Added Description A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
    Added Reference MITRE https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 [No types assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-41713 is associated with the following CWEs:

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability