{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "mitel",
    "label": "Mitel",
    "isStack": false,
    "url": "https://pwn.watch/t/mitel",
    "feed": "https://pwn.watch/t/mitel/feed.xml"
  },
  "counts": {
    "incidents": 3,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 3
  },
  "incidents": [
    {
      "slug": "mitel-sip-phones-cve-2024-41710",
      "title": "Mitel SIP Phones: SIP Phones Argument Injection Vulnerability",
      "url": "https://pwn.watch/i/mitel-sip-phones-cve-2024-41710",
      "json": "https://pwn.watch/i/mitel-sip-phones-cve-2024-41710.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Mitel SIP Phones",
      "tags": [
        "mitel",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-41710"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-02-12",
      "closedAt": "2025-02-12",
      "updatedAt": "2025-02-12",
      "summary": "Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system. Added to CISA KEV on 2025-02-12.",
      "xPost": null
    },
    {
      "slug": "mitel-micollab-cve-2024-41713",
      "title": "Mitel MiCollab: 2 exploited vulnerabilities (CVE-2024-41713, CVE-2024-55550)",
      "url": "https://pwn.watch/i/mitel-micollab-cve-2024-41713",
      "json": "https://pwn.watch/i/mitel-micollab-cve-2024-41713.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Mitel MiCollab",
      "tags": [
        "mitel",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-41713",
        "CVE-2024-55550"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-01-07",
      "closedAt": "2025-01-07",
      "updatedAt": "2025-01-07",
      "summary": "CVE-2024-41713: Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server. CVE-2024-55550: Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server. Added to CISA KEV on 2025-01-07.",
      "xPost": null
    },
    {
      "slug": "mitel-mivoice-connect-cve-2022-40765-41223",
      "title": "Mitel MiVoice Connect: 2 exploited vulnerabilities (CVE-2022-40765, CVE-2022-41223)",
      "url": "https://pwn.watch/i/mitel-mivoice-connect-cve-2022-40765-41223",
      "json": "https://pwn.watch/i/mitel-mivoice-connect-cve-2022-40765-41223.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Mitel MiVoice Connect",
      "tags": [
        "mitel",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-40765",
        "CVE-2022-41223"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-02-21",
      "closedAt": "2023-02-21",
      "updatedAt": "2023-02-21",
      "summary": "The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system. The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application. Added to CISA KEV on 2023-02-21. CISA lists known use in ransomware campaigns.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "mitel-sip-phones-cve-2024-41710",
      "incidentTitle": "Mitel SIP Phones: SIP Phones Argument Injection Vulnerability",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-02-12",
      "title": "CISA added CVE-2024-41710 to the KEV catalog (due 2025-03-05).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/mitel-sip-phones-cve-2024-41710"
    },
    {
      "incident": "mitel-micollab-cve-2024-41713",
      "incidentTitle": "Mitel MiCollab: 2 exploited vulnerabilities (CVE-2024-41713, CVE-2024-55550)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-01-07",
      "title": "CISA added CVE-2024-41713 to the KEV catalog (due 2025-01-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/mitel-micollab-cve-2024-41713"
    },
    {
      "incident": "mitel-micollab-cve-2024-41713",
      "incidentTitle": "Mitel MiCollab: 2 exploited vulnerabilities (CVE-2024-41713, CVE-2024-55550)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-01-07",
      "title": "CISA added CVE-2024-55550 to the KEV catalog (due 2025-01-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/mitel-micollab-cve-2024-41713"
    },
    {
      "incident": "mitel-mivoice-connect-cve-2022-40765-41223",
      "incidentTitle": "Mitel MiVoice Connect: 2 exploited vulnerabilities (CVE-2022-40765, CVE-2022-41223)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-02-21",
      "title": "CISA added CVE-2022-40765 to the KEV catalog (due 2023-03-14).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/mitel-mivoice-connect-cve-2022-40765-41223"
    },
    {
      "incident": "mitel-mivoice-connect-cve-2022-40765-41223",
      "incidentTitle": "Mitel MiVoice Connect: 2 exploited vulnerabilities (CVE-2022-40765, CVE-2022-41223)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-02-21",
      "title": "CISA added CVE-2022-41223 to the KEV catalog (due 2023-03-14).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/mitel-mivoice-connect-cve-2022-40765-41223"
    }
  ]
}