CVE-2024-41713
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- July 22, 2024
- Published Date
- October 21, 2024
- Last Updated
- January 11, 2025
- Vendor
- n/a
- Product
- n/a
- Description
- A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
CVSS Scores
SSVC Information
- Exploitation
- active
- Automatable
- Yes
- Technical Impact
- total
References
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2025-01-07 00:00:00 UTC |
Scanner Integrations
| Scanner | URL | Date Detected |
|---|---|---|
| Nuclei | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41713.yaml | 2025-04-26 00:00:00 UTC |
Potential Proof of Concepts
Warning: These PoCs have not been tested and could contain malware. Use at your own risk.
Sanandd/cve-2024-CVE-2024-41713
Type: github • Created: 2024-12-21 09:35:12 UTC • Stars: 0
cve-2024-CVE-2024-41713
watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
Type: github • Created: 2024-12-05 06:13:57 UTC • Stars: 16