CVE-2024-55550

CVE-2024-55550 is a low-severity vulnerability in Mitel Micollab with a CVSS 3.x base score of 2.7. It is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming it has been exploited in the wild (added 2025-01-07). The underlying weakness is classified as CWE-22.

Key facts

Description

Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.

Frequently asked questions

What is CVE-2024-55550?
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
How severe is CVE-2024-55550?
CVE-2024-55550 has a CVSS 3.x base score of 2.7, rated low severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2024-55550 being actively exploited?
Yes. CVE-2024-55550 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2025-01-07, which means active exploitation has been confirmed. It should be prioritised for remediation.
What products are affected by CVE-2024-55550?
CVE-2024-55550 affects Mitel Micollab. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-55550?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.
Does CVE-2024-55550 have an EU (EUVD) identifier?
Yes. CVE-2024-55550 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-52803. It is also flagged as exploited in the EUVD (since 2025-01-07).
When was CVE-2024-55550 published?
CVE-2024-55550 was published on 2024-12-10 and last updated on 2026-08-04.

References

Affected products (1)

More vulnerabilities in Mitel Micollab

All CVEs affecting Mitel Micollab →

Other CWE-22 (Path Traversal) vulnerabilities

Browse all CWE-22 (Path Traversal) vulnerabilities →