Mitel MiCollab: Authentication bypass and arbitrary file read (CVE-2024-41713)

CVE-2024-41713 is an authentication bypass and arbitrary file read vulnerability affecting Mitel MiCollab versions 9.8.1.201 and earlier. The vulnerability allows unauthenticated attackers to access sensitive files on the host system. Public proof-of-concept (PoC) exploit scripts are available, demonstrating the ability to read system files like '/etc/passwd'. The vulnerability carries a CVSS score of 9.1.

Impact

Successful exploitation allows unauthenticated attackers to read arbitrary files from the filesystem of the affected Mitel MiCollab instance. This can lead to the exposure of credentials, configuration files, and other sensitive system information, facilitating further unauthorized access or escalation.

Recommendation

• Identify all instances of Mitel MiCollab within the environment.
• Patch affected instances of Mitel MiCollab to a version beyond 9.8.1.201 immediately.
• If patching is not immediately feasible, restrict network access to the MiCollab interface to trusted IP addresses only.
• Review web server logs for suspicious requests containing path traversal sequences (e.g., '..', '/etc/passwd') targeting the MiCollab application.