PatchTheCVECVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability
CVE-2024-55550 is a low-severity flaw (CVSS 2.7) affecting micollab, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
Why this priority
- EPSS top 1%: very likely to be exploited
- Exploited in the wild (CISA KEV)
- Used in ransomware campaigns
A fixed release or distro patch exists.
Risk facts
| CVSS score | 2.7 (Low) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 38.2% (top 1%) |
| CISA exploited list | Yes, fix due 2025-01-28, used in ransomware |
| Weakness | CWE-22 |
| Published | 2024-12-10 |
| Last modified | 2026-08-04 |
Last updated 2026-08-04 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Exploited Added to the CISA Known Exploited Vulnerabilities list
- Deadline CISA due date for US federal agencies to patch
- Updated Record last modified
Exact fixes by distribution
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Nuclei scan template: Mitel MiCollab - Arbitary File Read
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-55550?
micollab: upgrade to newer than 9.8.1.201. Exact commands for each OS are on this page.
Is CVE-2024-55550 being exploited?
Yes. CVE-2024-55550 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.
What does CVE-2024-55550 affect?
CVE-2024-55550 affects micollab. Severity is low (CVSS 2.7). Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to ac
How urgent is CVE-2024-55550?
Priority 64/100. EPSS top 1%: very likely to be exploited; Exploited in the wild (CISA KEV); Used in ransomware campaigns
Related CVEs
- CVE-2024-41713 CRITICAL 9.1 EXPLOITED UPGRADE Mitel MiCollab Path Traversal Vulnerability
- CVE-2025-52914 HIGH 8.8 UPGRADE A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.10
- CVE-2024-47912 HIGH 8.2 UPGRADE A vulnerability in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through 9.8 SP1 FP
- CVE-2024-47224 MEDIUM 6.5 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2
- CVE-2024-47223 CRITICAL 9.4 UPGRADE A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2