DeutschShown in its original language — a full translation is planned for a future version.
Mitel MiCollab: Mehrere Schwachstellen
view advisory published 2024-10-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mitel MiCollab ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, Phishing-Angriffe durchzuführen und vertrauliche Informationen preiszugeben.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-55550US | low2.7OT critical | KEV | ||
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successfu… | ||||
| CVE-2024-47224US | — | — | ||
A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF… | ||||
| CVE-2024-41713US | critical9.1OT critical | KEV | ||
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path travers… | ||||
| CVE-2024-47912US | —OT elevated | — | ||
A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to perform unaut… | ||||
| CVE-2024-47223US | — | — | ||
A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a SQL… | ||||
| CVE-2024-47189US | — | — | ||
The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2024-3141 - CSAF Versionself
- WID-SEC-2024-3141 - Portal Versionself
- CISA Known Exploited Vulnerabilities Catalog vom 2025-01-07external
- Mitel Product Security Advisory vom 2024-10-09external
- Mitel Product Security Advisory vom 2024-10-09external
- Mitel Product Security Advisory vom 2024-10-09external
- Mitel Product Security Advisory vom 2024-10-09external
- Mitel Product Security Advisory vom 2024-10-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan