CVE-2024-35287

Oct. 21, 2024, 9:15 p.m.

Product(s) Impacted

Mitel MiCollab NuPoint Messenger

  • through 9.8 SP1 (9.8.1.5)

Description

A vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8 SP1 (9.8.1.5) could allow an authenticated attacker with administrative privilege to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges.

Weaknesses

Date

Published: Oct. 21, 2024, 9:15 p.m.

Last Modified: Oct. 21, 2024, 9:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References