Mitel 0-day, 5-year-old Oracle RCE exploited in the wild
1 day ago · It now has a CVE but still no fix: "CVE-2024-55550, is substantially mitigated by MiCollab 9.8 SP2 (9.8.2.12)," according to Mitel's December 12 security advisory update. "This low severity issue will be addressed in future product updates." PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files
CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
1 day ago · The two security defects, tracked as CVE-2024-41713 and CVE-2024-55550, are described as path traversal issues that impact versions 9.8 SP1 FP2 (9.8.1.201) and earlier of Mitel MiCollab. CVE-2024-41713 (CVSS score of 9.8) is a critical bug that could allow unauthenticated attackers to gain access to provisioning information and to perform ...
CISA warns of critical Oracle, Mitel flaws exploited in attacks
2 days ago · The U.S. cybersecurity agency also warned of a second Mitel MiCollab path traversal vulnerability (CVE-2024-55550), enabling authenticated attackers with admin privileges to read arbitrary files ...
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active ...
1 day ago · The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three flaws impacting Mitel MiCollab and Oracle WebLogic Server to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.. The list of vulnerabilities is as follows - CVE-2024-41713 (CVSS score: 9.1) - A path traversal vulnerability in Mitel MiCollab that could allow an attacker to ...
Critical Mitel, Oracle flaws find active exploitation, CISA urges ...
1 day ago · One of the Mitel flaws, tracked as CVE-2024-41713, is a critical (CVSS 9.8/10) path traversal vulnerability in the NuPoint Unified Messaging component of Mitel MiCollab that could allow an ...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
2 days ago · CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability; CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability; CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability; Users and administrators are also encouraged to review the Palo Alto Threat ...
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug
Dec 6, 2024 · updated A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive files on vulnerable instances.
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File …
Dec 5, 2024 · Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances.
Mitel MiCollab zero-day flaw gets proof-of-concept exploit
Dec 5, 2024 · Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server's filesystem.
CISA Warns of Three Vulnerabilities Actively Exploited in Attacks
1 day ago · Mitel MiCollab Vulnerabilities. Two of the vulnerabilities impact Mitel MiCollab, a widely used unified communications platform: ... Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications. ...
- Some results have been removed