Skip to content
OpenAdvisories
Critical · 9.1 Known exploited · Ransomware Scanner template Public exploit CVE-2024-41713 EUVD-2024-39339GHSA-8v9w-9wj4-52p3

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthent…

Published Oct 21, 2024 · Updated Aug 4, 2026 · Assigned by mitre

Description

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 5 repositories

  • watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713 ★ 20 · Dec 5, 2024
  • gunyakit/CVE-2024-41713-PoC-exploit ★ 0 · May 18, 2025

    Mitel MiCollab Authentication Bypass to Arbitrary File Read

  • amanverma-wsu/CVE-2024-41713-Scan ★ 0 · Jan 11, 2025

    A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This tool is for educational purposes and au…

  • zxj-hub/CVE-2024-41713POC ★ 0 · Dec 21, 2024

    Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞，并且输入验证不足，未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击，成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围：version < MiCollab 9.8 SP2 (9…

  • Sanandd/cve-2024-CVE-2024-41713 ★ 0 · Dec 21, 2024

    cve-2024-CVE-2024-41713

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Advisories 2

References