CVE-2024-55550
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
8/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
CISA Known Exploited Vulnerability
Vendor / Product
Mitel — MiCollab
Date Added
2025-01-07
Remediation Due
2025-01-28
Ransomware Use
CONFIRMED
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55550
Weakness Classification (1)
References & Advisories (3)
Vendor Advisory
Vendor Advisory
US Government Resource