CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
2 days ago · The two security defects, tracked as CVE-2024-41713 and CVE-2024-55550, are described as path traversal issues that impact versions 9.8 SP1 FP2 (9.8.1.201) and earlier of Mitel MiCollab. CVE-2024-41713 (CVSS score of 9.8) is a critical bug that could allow unauthenticated attackers to gain access to provisioning information and to perform ...
CISA warns of critical Oracle, Mitel flaws exploited in attacks
3 days ago · CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are actively exploited in attacks.
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active ...
2 days ago · The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three flaws impacting Mitel MiCollab and Oracle WebLogic Server to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.. The list of vulnerabilities is as follows - CVE-2024-41713 (CVSS score: 9.1) - A path traversal vulnerability in Mitel MiCollab that could allow an attacker to ...
CISA Warns of Three Vulnerabilities Actively Exploited in Attacks
2 days ago · Mitel MiCollab Vulnerabilities. Two of the vulnerabilities impact Mitel MiCollab, a widely used unified communications platform: ... Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications. ...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
3 days ago · CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability; CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability; CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability; Users and administrators are also encouraged to review the Palo Alto Threat ...
Critical Mitel, Oracle flaws find active exploitation, CISA urges ...
2 days ago · One of the Mitel flaws, tracked as CVE-2024-41713, is a critical (CVSS 9.8/10) path traversal vulnerability in the NuPoint Unified Messaging component of Mitel MiCollab that could allow an ...
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug
Dec 6, 2024 · updated A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive files on vulnerable instances.
Mitel MiCollab zero-day flaw gets proof-of-concept exploit
Dec 5, 2024 · Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server's filesystem.
Critical Mitel MiCollab Flaw Exposes Systems to ... - The Hacker News
Dec 5, 2024 · Cybersecurity researchers have released a proof-of-concept (PoC) exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances.
Mitel MiCollab Unauthorized Access Attack | Outbreak Alert
Dec 11, 2024 · Security flaws in Mitel MiCollab, CVE-2024–35286, CVE-2024–41713, and an arbitrary file read zero-day (still without a CVE number) have been found, putting many organizations at risk.
- Some results have been removed