Mitel MiCollab Vulnerability - SQL Injection Risk
CVE-2024-47223

9.4CRITICAL

Key Information:

Vendor

Mitel
Status
Micollab
Vendor
CVE Published:
21 October 2024

What is CVE-2024-47223?

A vulnerability exists in the Audio, Web and Video Conferencing component of Mitel MiCollab versions up to 9.8 SP1 FP2, where inadequate user input sanitization allows unauthenticated attackers to exploit SQL injection techniques. This could enable access to non-sensitive user provisioning details and the execution of arbitrary SQL commands, posing a potential risk to the integrity of the database.

References

https://www.mitel.com/support/security-advisories/mitel-p...

CVSS V3.1

Score:
9.4
Severity:
CRITICAL
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.