VYPR
← All advisories
Medium severity5.6NVD Advisory· Published Oct 21, 2024· Updated Jun 17, 2026

CVE-2024-35315

CVE-2024-35315

Description

A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instance (MiVB SVI) 1.0.0.25, could allow an authenticated attacker to conduct a privilege escalation attack due to improper file validation. A successful exploit could allow an attacker to run arbitrary code with elevated privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mitel/Micollab3 versions
    cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*range: <=9.7.1.110
    • (no CPE)
    • (no CPE)range: <=9.7.1.110
  • Mitel/Mivoice Business Solution Virtual Instance2 versions
    cpe:2.3:a:mitel:mivoice_business_solution_virtual_instance:1.0.0.25:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mitel:mivoice_business_solution_virtual_instance:1.0.0.25:*:*:*:*:*:*:*
    • (no CPE)range: =1.0.0.25

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.