CVE-2024-42514: Mitel Micontact Center Business

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session.

Affected products

• Mitel Micontact Center Business: up to and including 10.1.0.4

Published 2024-10-01. Last modified 2026-06-17.