CVE-2024-41713
CRITICAL KEV RANSOMWARE NUCLEIMitel MiCollab < 9.8.1.201 - Unauthenticated Path Traversal in NuPoint Unified Messaging
Title source: llmExploitation Summary
CVE-2024-41713 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 7, 2025, with confirmed use in ransomware campaigns. EIP tracks 6 public exploits from researchers including watchtowrlabs, gunyakit, amanverma-wsu. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-41713, an authentication bypass vulnerability in Mitel MiCollab. The exploit leverages a path traversal technique to achieve arbitrary file read by crafting a malicious XML payload sent to a vulnerable endpoint.
Description
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
Exploits (6)
This repository contains a functional exploit for CVE-2024-41713, an authentication bypass vulnerability in Mitel MiCollab. The exploit leverages a path traversal technique to achieve arbitrary file read by crafting a malicious XML payload sent to a vulnerable endpoint.
This repository contains a functional exploit for CVE-2024-41713, an authentication bypass vulnerability in Mitel MiCollab leading to arbitrary file read. The exploit uses a crafted POST request to read /etc/passwd via path traversal in the ReconcileWizard endpoint.
The repository contains a Python script that scans for CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server. It sends a crafted request to detect the vulnerability but does not exploit it.
This repository contains a functional exploit for CVE-2024-41713, targeting Mitel MiCollab. The exploit leverages a path traversal vulnerability to read arbitrary files (e.g., /etc/passwd) via a crafted HTTP POST request with XML payload.
This repository contains a functional exploit for CVE-2024-41713, an arbitrary file read vulnerability in Mitel MiCollab's NuPoint Unified Messaging (NPM) component. The exploit leverages path traversal and authentication bypass to read sensitive files like /etc/passwd.
The repository contains functional exploit code for CVE-2024-41713, demonstrating a command execution vulnerability in OpenCode. The script sends a crafted request to execute the 'id' command and checks for the presence of 'uid=' and 'gid=' in the response to confirm exploitation.
Nuclei Templates (1)
http.html:"Mitel Networks"
body="mitel networks"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N