coldbraid

CVE-2024-41713 Mitel MiCollab

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

CVSS
not scored

CWE-22

On CISA’s exploited list

Mitel MiCollab Path Traversal Vulnerability

Added
2025-01-07
Federal patch deadline
2025-01-28
Ransomware use
known