CVE-2024-47912: 
Mitel MiCollab vulnerability analysis and mitigation

A vulnerability has been identified in the AWV (Audio, Web, and Video) Conferencing component of Mitel MiCollab through version 9.8 SP1 FP2 (9.8.1.201). The vulnerability allows an unauthenticated attacker to perform unauthorized data-access attacks due to missing authentication mechanisms (NVD, Mitel Advisory).

The vulnerability has been assigned CVE-2024-47912 and received a CVSS 3.1 base score of 8.2 (HIGH) with the vector string AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. The issue specifically affects the Audio, Web and Video Conferencing (AWV) component and is related to missing authentication mechanisms (Mitel Advisory).

A successful exploitation of this vulnerability could allow an attacker to access and delete sensitive information, specifically web conference recording files. The impact is constrained to the ability to listen to or delete these files, affecting both the confidentiality and integrity of the system (Mitel Advisory).

Mitel has released MiCollab version 9.8 SP2 (9.8.2.12) to address this vulnerability. For customers unable to upgrade immediately, Mitel has provided a patch available for releases 9.7 and above. Detailed instructions for applying the patch can be found in Mitel Knowledge Base article SO8218 (Mitel Advisory).