CVE-2024-35315

Oct. 21, 2024, 9:15 p.m.

Product(s) Impacted

Mitel MiCollab Desktop Client

  • through 9.7.1.110

MiVoice Business Solution Virtual Instance (MiVB SVI)

  • 1.0.0.25

Description

A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an authenticated attacker to conduct a privilege escalation attack due to improper file validation. A successful exploit could allow an attacker to run arbitrary code with elevated privileges.

Weaknesses

Date

Published: Oct. 21, 2024, 9:15 p.m.

Last Modified: Oct. 21, 2024, 9:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References