CVE-2024-55550
Published: January 7, 2025
Official Description
Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
CISA KEV Advisory
Mitel MiCollab Path Traversal Vulnerability
Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Risk Analysis
This path traversal vulnerability in Mitel MiCollab allows an authenticated administrator to read local files due to insufficient input sanitization. While it requires administrative privileges, it can be chained with other vulnerabilities to achieve unauthenticated remote file reading. The high severity and confirmed exploitation in the wild, along with an EPSS score of 0.14908, highlight its critical nature.
This vulnerability is actively exploited in the wild and is included in CISA's KEV catalog. It can be chained with CVE-2024-41713 for unauthenticated remote file access.
Apply the necessary security patches for Mitel MiCollab to address the path traversal vulnerability. Implement strict input validation and least privilege principles for administrative accounts.
Technical Analysis
CVE-2024-55550 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
CISA has added CVE-2024-55550 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.
Exploit & PoC Resources
All References (2)
Quick Facts
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2024-55550 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts
- !CISA KEV: Federal agencies must patch per BOD 22-01 timeline
- !Active exploitation confirmed — treat as P1