CVE-2024-35315 PoC — Mitel MiCollab和Mitel MiVoice 安全漏洞

Source

https://github.com/ewilded/CVE-2024-35315-POC

Associated Vulnerability

Title:Mitel MiCollab和Mitel MiVoice 安全漏洞 (CVE-2024-35315)
Description:Mitel MiCollab和Mitel MiVoice都是加拿大敏迪（Mitel）公司的产品。Mitel MiCollab是一款为员工提供语音、视频、消息、音频会议和团队协作的移动应用程序。Mitel MiVoice是一款可支持 IP 通话的电话机。 Mitel MiCollab 9.7.1.110版本及之前版本和Mitel MiVoice 1.0.0.25版本存在安全漏洞，该漏洞源于对文件验证不当。攻击者利用该漏洞可以提升权限并运行任意代码。

Description

Mitel Collab Local Privilege Escalation CVE-2024-35315 PoC

File Snapshot


 [4.0K]  /data/pocs/b0295bf3fca40df1c10f90f6e6642c6988a38b30
├── [378K]  GOT_SYSTEM1.PNG
├── [352K]  GOT_SYSTEM2.PNG
├── [ 21K]  main.cpp
├── [1.4K]  Mitel_Collab_LPE.sln
├── [6.7K]  Mitel_Collab_LPE.vcxproj
├── [1.2K]  Mitel_Collab_LPE.vcxproj.filters
├── [ 168]  Mitel_Collab_LPE.vcxproj.user
├── [2.3K]  raw.cpp
├── [ 270]  stdafx.h
└── [ 314]  targetver.h

0 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!