Improper Neutralization of Argument Delimiters in a Command in MiCollab and MiVoice Business Solution Virtual Instance (MiVB SVI) - CVE-2024-35314
Published: June 3, 2024
Vulnerability identifier: #VU90707
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-35314
CWE-ID: CWE-88
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary argument.
The vulnerability exists due to insufficient parameter sanitization. A remote attacker can execute arbitrary code on the target system.
Affected software
MiCollab
MiVoice Business Solution Virtual Instance (MiVB SVI)
MiVoice Business Solution Virtual Instance (MiVB SVI)
How to mitigate CVE-2024-35314
Install updates from vendor's website.
MiCollab - update to 9.8