CVE-2024-55550 Scanner

Mitel MiCollab is a business communication platform used by enterprises for collaboration, messaging, and conferencing. It provides employees with tools for communication, including voice, video, and messaging capabilities. The platform integrates with existing enterprise infrastructure to enhance communication workflows. Organizations utilize MiCollab for internal team collaboration and external communication with clients. It is widely deployed in businesses that require secure and efficient communication solutions. The software is accessible via desktop and mobile applications.

The Arbitrary File Read vulnerability in Mitel MiCollab allows an unauthenticated attacker to access sensitive files on the server. This occurs due to improper input validation, enabling path traversal attacks. An attacker can exploit this vulnerability by sending specially crafted requests to the server. This flaw can lead to unauthorized access to system configurations, credentials, or other sensitive information. If exploited, attackers can use the accessed data for further attacks. This vulnerability represents a critical risk to affected systems.

The vulnerability exists in endpoints that fail to validate and sanitize file access requests properly. Attackers can exploit this by using directory traversal sequences to navigate the file system. The affected endpoint allows remote requests to specify arbitrary file paths, bypassing access controls. By crafting a malicious request, an attacker can retrieve files containing sensitive information such as system credentials. The flaw affects both GET and POST request-based interactions. As a result, unauthorized users can retrieve critical system files without authentication.

If exploited, this vulnerability can lead to significant security risks for affected organizations. Attackers can obtain credentials stored in configuration files, leading to unauthorized access to the system. Sensitive business or personal data stored on the system may be leaked. Malicious actors could use the retrieved information to escalate privileges or conduct further attacks. The exposure of system files may also facilitate remote code execution if additional vulnerabilities exist. Ultimately, this issue can compromise the confidentiality and integrity of enterprise communication systems.

REFERENCES

• https://github.com/watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
• https://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/
• https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029