The vulnerability of the MiCollab Desktop Client client of the collaborative work platform MiCollab, along with the virtual instance of the MiVoice Business Solution Virtual Instance (MiVB SVI), allows a hacker to bypass security restrictions, enhance their privileges, and execute arbitrary code.

🗓️ 13 Jun 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

MiCollab Desktop Client and MiVB SVI flaw enables access control bypass, privilege escalation, and code execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-35315	3 Jun 202414:31	–	circl
CNNVD	Mitel MiCollab和Mitel MiVoice 代码注入漏洞	21 Oct 202400:00	–	cnnvd
CVE	CVE-2024-35315	21 Oct 202400:00	–	cve
Cvelist	CVE-2024-35315	21 Oct 202400:00	–	cvelist
NVD	CVE-2024-35315	21 Oct 202421:15	–	nvd
OSV	CVE-2024-35315	21 Oct 202421:15	–	osv
Positive Technologies	PT-2024-4059 · Mitel · Mivoice Business Solution Virtual Instance +1	23 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-35315	23 May 202507:12	–	redhatcve
Vulnrichment	CVE-2024-35315	21 Oct 202400:00	–	vulnrichment

Vulners

Node

mitel_networks mitel_micollabRange≤9.7.1.110

OR

mitel_networks mivoice_business_solution_virtual_instance_(mivb_svi)Match1.0.0.25

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024060312
mitel	www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0016
mitel	www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin240016001-v10.pdf
github	www.github.com/ewilded/CVE-2024-35315-POC/tree/main
web	www.web.nvd.nist.gov/view/vuln/detail

13 Jun 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.8

CVSS 37.8

EPSS0.00775

MiCollab Desktop Client MiVB SVI Access control Privilege escalation Arbitrary code