Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-52913. PoCs published by pgaSUS99.
AI-analyzed exploit summary The repository contains a Python script that scans for CVE-2025-52913, a path normalization vulnerability in Mitel MiCollab, by testing crafted URLs with traversal sequences. It checks for specific responses indicating potential exploitation but does not include actual exploit code.
Description
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP2 (9.8.2.12) could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
Exploits (1)
The repository contains a Python script that scans for CVE-2025-52913, a path normalization vulnerability in Mitel MiCollab, by testing crafted URLs with traversal sequences. It checks for specific responses indicating potential exploitation but does not include actual exploit code.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H