All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2024-41713
NONEKEVpublish date unavailable
CVSS / 10
// description
Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
// required action (CISA KEV)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
added 2025-01-07 00:00 UTC