Mitel Product Security Advisory 24-0021
Mitel Product Security Advisory 24-0021
MiCollab Command Injection Vulnerability
Advisory ID: 24-0021
Publish Date: 2024-07-24
Last Updated: 2024-08-13
Revision: 3.0
Summary
A command injection vulnerability has been identified in the MiCollab Client Server of Mitel MiCollab and MiVB SVI which, if successfully exploited, could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system.
Mitel is recommending customers with affected product versions update to the latest release.
Affected Products
Security Bulletins are being issued for the following products:
| Product Name | Product Version | Security Bulletin | Last Updated |
|---|---|---|---|
| MiCollab | 9.8 SP1 (9.8.1.5) and earlier | 24-0021-001 | 2024-08-13 |
| MiVB SVI | 1.0.0.27 and earlier | 24-0021-001 | 2024-08-13 |
Risk Assessment
The risk of this vulnerability is rated as Critical.
Mitigation / Recommended Action
Customers are advised to update their software to the latest versions. For additional information, contact Product Support.
Related CVEs / CWEs / Advisories
CVE-2024-41714
Revision History
| Version | Date | Description |
|---|---|---|
| 1.0 | 2024-07-24 | Initial version |
| 2.0 | 2024-07-29 | Updated the Security Bulletin |
| 3.0 | 2024-08-13 | Updated the Security Bulletin |