{"id":"CVE-2024-55550","kind":"vulnerability","aliases":["CVE-2024-55550"],"related":[],"title":"Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a…","description":"Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"Mitel MiCollab has a path traversal flaw in which an authenticated administrator can read arbitrary local files on the server. The source says it can be chained with CVE-2024-41713, an unauthenticated remote file-read bug, and CISA lists it as actively exploited with ransomware use.","severity":"medium","cvss":4.4,"epss":null,"exploited":true,"exploited_at":"2025-01-07T00:00:00+00:00","products":[{"name":"Mitel MiCollab","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"mitel micollab","fixed":[],"affected":"<= 9.8.1.201","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","mitel-micollab","ransomware","self-hosted","unified-communications","vendor"],"not_affected_if":["not-running-micollab"],"how_to_check":null,"fix":"Apply the vendor mitigations per CISA guidance; if none are available, discontinue use of the product. Specific patched versions: unknown","status":"open","published_at":"2024-12-10T19:15:31+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:52:46+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:52:46Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor mitigations per CISA guidance; if none are available, discontinue use of the product. Specific patched versions: unknown","reach":"network","impact":"high","summary":"Mitel MiCollab has a path traversal flaw in which an authenticated administrator can read arbitrary local files on the server. The source says it can be chained with CVE-2024-41713, an unauthenticated remote file-read bug, and CISA lists it as actively exploited with ransomware use.","category":"vendor","who_cares":["mitel-micollab","self-hosted","unified-communications"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with admin access reads arbitrary files, chainable to unauthenticated file reads","analyst_note":"Find Mitel's advisory and affected/fixed versions for CVE-2024-55550 and CVE-2024-41713; the KEV entry gives no version or detection details.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-running-micollab"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000466,"input_tokens":2683,"output_tokens":395,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':17A,20A,67B,121C '-41713':68B,122C '-55550':18A,21A '9.8':4A 'action':138C 'activ':81B 'administr':12A,49B,100C 'allow':7A,95C,124C 'appli':139C 'arbitrari':52B,131C 'attack':10A,98C,128C 'authent':9A,48B,97C 'bug':75B 'chain':64B,118C 'cisa':77B,136C 'communic':36B 'conduct':15A 'contain':88C 'could':6A,94C 'cve':16A,19A,66B,120C 'discontinu':145C 'due':109C 'exploit':26B,82B 'file':54B,73B,105C,132C 'file-read':72B 'flaw':44B 'host':33B 'input':112C 'instruct':143C 'insuffici':111C 'list':78B 'local':53B,104C 'micollab':2A,23A,25A,29B,39B,87C 'mitel':1A,22A,24A,28B,38B,86C 'mitel-micollab':27B 'mitig':140C,151C 'path':42B,90C 'per':141C 'privileg':13A,101C 'product':149C 'ransomwar':30B,84B 'read':51B,74B,103C,130C 'remot':71B,127C 'requir':137C 'sanit':113C 'say':60B 'self':32B 'self-host':31B 'server':57B,135C 'sourc':59B 'sp2':5A 'system':108C 'travers':43B,91C 'unauthent':70B,126C 'unavail':153C 'unifi':35B 'unified-commun':34B 'use':85B,146C 'vendor':37B,142C 'vulner':92C,115C 'within':106C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-12-10T19:15:31+00:00","kev":{"dateAdded":"2025-01-07","dueDate":"2025-01-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-55550","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-55550","severity":null,"published_at":"2025-01-07T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:22+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-55550","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55550","severity":null,"published_at":"2024-12-10T19:15:31+00:00","modified_at":"2026-08-04T05:16:31+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}