Maple Labs

CVE search · CVE-2024-41714

CVE-2024-41714

high 8.8

A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-94

Severity

VersionScoreVectorSource
CVSS 3.1 high 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • mitel · micollab
  • mitel · mivoice_business_solution_virtual_instance

References