NVD disclosure day
CVE-2024-41713
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A path traversal vulnerability in Mitel MiCollab could allow an attacker to access and modify user data and system configurations. This poses a business risk by potentially exposing sensitive information and disrupting operations.
CVE-2024-40089
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An authenticated attacker can execute arbitrary code by injecting commands into the name of a Vilo 5 Mesh WiFi System device, potentially impacting system integrity and confidentiality. This vulnerability requires administrative access to the device, and if exploited, could lead to device compromise.
CVE-2024-49894
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the display driver could allow a local attacker to cause system instability or data corruption by triggering an out-of-bounds index. This impacts organizations running affected Linux kernel configurations.
CVE-2024-47685
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in the Linux kernel's netfilter component could allow the transmission of uninitialized data in network traffic when rejecting IPv6 packets. This affects core packet handling and may impact network communication integrity.