1. Home
  2. Mapping Frameworks
  3. Known Exploited Vulnerabilities Home
  4. Mitel MiCollab Path Traversal Vulnerability

Known Exploited Vulnerabilities CVE-2024-41713

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name Notes
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability exploitation_technique T1068 Exploitation for Privilege Escalation
Comments
This path traversal vulnerability can lead to privilege escalation on MiCollab, which can then lead to other exploits such as CVE-2024-55550.
References
  1. https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/?123
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability primary_impact T1005 Data from Local System
Comments
This path traversal vulnerability can lead to privilege escalation on MiCollab, which can then lead to other exploits such as CVE-2024-55550.
References
  1. https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/?123