CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
2 days ago · The two security defects, tracked as CVE-2024-41713 and CVE-2024-55550, are described as path traversal issues that impact versions 9.8 SP1 FP2 (9.8.1.201) and earlier of Mitel MiCollab. CVE-2024-41713 (CVSS score of 9.8) is a critical bug that could allow unauthenticated attackers to gain access to provisioning information and to perform ...
Mitel 0-day, 5-year-old Oracle RCE exploited in the wild
1 day ago · It now has a CVE but still no fix: "CVE-2024-55550, is substantially mitigated by MiCollab 9.8 SP2 (9.8.2.12)," according to Mitel's December 12 security advisory update. "This low severity issue will be addressed in future product updates." PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active ...
2 days ago · The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three flaws impacting Mitel MiCollab and Oracle WebLogic Server to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.. The list of vulnerabilities is as follows - CVE-2024-41713 (CVSS score: 9.1) - A path traversal vulnerability in Mitel MiCollab that could allow an attacker to ...
CISA warns of critical Oracle, Mitel flaws exploited in attacks
2 days ago · The U.S. cybersecurity agency also warned of a second Mitel MiCollab path traversal vulnerability (CVE-2024-55550), enabling authenticated attackers with admin privileges to read arbitrary files ...
Critical Mitel, Oracle flaws find active exploitation, CISA urges ...
1 day ago · One of the Mitel flaws, tracked as CVE-2024-41713, is a critical (CVSS 9.8/10) path traversal vulnerability in the NuPoint Unified Messaging component of Mitel MiCollab that could allow an ...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
3 days ago · CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability; CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability; CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability; Users and administrators are also encouraged to review the Palo Alto Threat ...
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug
Dec 6, 2024 · updated A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive files on vulnerable instances.
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File …
Dec 5, 2024 · Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances.
Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024 …
Dec 5, 2024 · A SQL injection vulnerability has been identified in NuPoint Unified Messaging (NPM) component of Mitel MiCollab which, if successfully exploited, could allow a malicious actor to conduct a SQL injection attack.
Mitel MiCollab zero-day flaw gets proof-of-concept exploit
Dec 5, 2024 · Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server's filesystem.
- Some results have been removed