auren-research/cyber-sec huggingface dataset:
cveID: CVE-2025-24985
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
dateAdded: 2025-03-11
shortDescription: Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-04-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24985 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24985
cwes: CWE-190
CWE-122
cveID: CVE-2025-24984
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows NTFS Information Disclosure Vulnerability
dateAdded: 2025-03-11
shortDescription: Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-04-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24984 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24984
cwes: CWE-532
cveID: CVE-2025-24983
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Win32k Use-After-Free Vulnerability
dateAdded: 2025-03-11
shortDescription: Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-04-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24983 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24983
cwes: CWE-416
cveID: CVE-2025-26633
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
dateAdded: 2025-03-11
shortDescription: Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-04-01
knownRansomwareCampaignUse: Known
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633
cwes: CWE-707
cveID: CVE-2024-13161
vendorProject: Ivanti
product: Endpoint Manager (EPM)
vulnerabilityName: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
dateAdded: 2025-03-10
shortDescription: Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-31
knownRansomwareCampaignUse: Unknown
notes: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13161
cwes: CWE-36
cveID: CVE-2024-13160
vendorProject: Ivanti
product: Endpoint Manager (EPM)
vulnerabilityName: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
dateAdded: 2025-03-10
shortDescription: Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-31
knownRansomwareCampaignUse: Unknown
notes: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13160
cwes: CWE-36
cveID: CVE-2024-13159
vendorProject: Ivanti
product: Endpoint Manager (EPM)
vulnerabilityName: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
dateAdded: 2025-03-10
shortDescription: Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-31
knownRansomwareCampaignUse: Unknown
notes: https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13159
cwes: CWE-36
cveID: CVE-2024-57968
vendorProject: Advantive
product: VeraCore
vulnerabilityName: Advantive VeraCore Unrestricted File Upload Vulnerability
dateAdded: 2025-03-10
shortDescription: Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-31
knownRansomwareCampaignUse: Unknown
notes: https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1 ; https://nvd.nist.gov/vuln/detail/CVE-2024-57968
cwes: CWE-434
cveID: CVE-2025-25181
vendorProject: Advantive
product: VeraCore
vulnerabilityName:  Advantive VeraCore SQL Injection Vulnerability
dateAdded: 2025-03-10
shortDescription: Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-31
knownRansomwareCampaignUse: Unknown
notes: https://advantive.my.site.com/support/s/article/Veracore-Release-Notes-2025-1-1-3 ; https://nvd.nist.gov/vuln/detail/CVE-2025-25181
cwes: CWE-89
cveID: CVE-2025-22226
vendorProject: VMware
product: ESXi, Workstation, and Fusion
vulnerabilityName: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
dateAdded: 2025-03-04
shortDescription: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-25
knownRansomwareCampaignUse: Unknown
notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22226
cwes: CWE-125
cveID: CVE-2025-22225
vendorProject: VMware
product: ESXi
vulnerabilityName: VMware ESXi Arbitrary Write Vulnerability
dateAdded: 2025-03-04
shortDescription: VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-25
knownRansomwareCampaignUse: Known
notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225
cwes: CWE-123
cveID: CVE-2025-22224
vendorProject: VMware
product: ESXi and Workstation
vulnerabilityName: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
dateAdded: 2025-03-04
shortDescription: VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-25
knownRansomwareCampaignUse: Unknown
notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22224
cwes: CWE-367
cveID: CVE-2024-50302
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Use of Uninitialized Resource Vulnerability
dateAdded: 2025-03-04
shortDescription: The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-25
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-50302
cwes: CWE-908
cveID: CVE-2024-4885
vendorProject: Progress
product: WhatsUp Gold
vulnerabilityName: Progress WhatsUp Gold Path Traversal Vulnerability
dateAdded: 2025-03-03
shortDescription: Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-24
knownRansomwareCampaignUse: Unknown
notes: https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-4885
cwes: CWE-22
cveID: CVE-2018-8639
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
dateAdded: 2025-03-03
shortDescription: Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-24
knownRansomwareCampaignUse: Known
notes: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8639 ; https://nvd.nist.gov/vuln/detail/CVE-2018-8639
cwes: CWE-404
cveID: CVE-2022-43769
vendorProject: Hitachi Vantara
product: Pentaho Business Analytics (BA) Server
vulnerabilityName: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
dateAdded: 2025-03-03
shortDescription: Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-24
knownRansomwareCampaignUse: Unknown
notes: https://support.pentaho.com/hc/en-us/articles/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769 ; https://nvd.nist.gov/vuln/detail/CVE-2022-43769
cwes: CWE-74
cveID: CVE-2022-43939
vendorProject: Hitachi Vantara
product: Pentaho Business Analytics (BA) Server
vulnerabilityName: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
dateAdded: 2025-03-03
shortDescription: Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-24
knownRansomwareCampaignUse: Unknown
notes: https://support.pentaho.com/hc/en-us/articles/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43939- ; https://nvd.nist.gov/vuln/detail/CVE-2022-43939
cwes: CWE-647
cveID: CVE-2023-20118
vendorProject: Cisco
product: Small Business RV Series Routers
vulnerabilityName: Cisco Small Business RV Series Routers Command Injection Vulnerability
dateAdded: 2025-03-03
shortDescription: Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-24
knownRansomwareCampaignUse: Unknown
notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 ; https://nvd.nist.gov/vuln/detail/CVE-2023-20118
cwes: CWE-77
cveID: CVE-2023-34192
vendorProject: Synacor
product: Zimbra Collaboration Suite (ZCS)
vulnerabilityName: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2025-02-25
shortDescription: Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-18
knownRansomwareCampaignUse: Unknown
notes: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2023-34192
cwes: CWE-79
cveID: CVE-2024-49035
vendorProject: Microsoft
product: Partner Center
vulnerabilityName: Microsoft Partner Center Improper Access Control Vulnerability
dateAdded: 2025-02-25
shortDescription: Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-18
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49035 ; https://nvd.nist.gov/vuln/detail/CVE-2024-49035
cwes: CWE-269
cveID: CVE-2024-20953
vendorProject: Oracle
product: Agile Product Lifecycle Management (PLM)
vulnerabilityName: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
dateAdded: 2025-02-24
shortDescription: Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-17
knownRansomwareCampaignUse: Unknown
notes: https://www.oracle.com/security-alerts/cpujan2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-20953
cwes: CWE-502
cveID: CVE-2017-3066
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Deserialization Vulnerability
dateAdded: 2025-02-24
shortDescription: Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-17
knownRansomwareCampaignUse: Unknown
notes: https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2017-3066
cwes: CWE-502
cveID: CVE-2025-24989
vendorProject: Microsoft
product: Power Pages
vulnerabilityName: Microsoft Power Pages Improper Access Control Vulnerability
dateAdded: 2025-02-21
shortDescription: Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.
requiredAction: Apply mitigations per vendor instructions, follow BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-14
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24989 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24989
cwes: CWE-284
cveID: CVE-2025-0111
vendorProject: Palo Alto Networks
product: PAN-OS
vulnerabilityName: Palo Alto Networks PAN-OS File Read Vulnerability
dateAdded: 2025-02-20
shortDescription: Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-13
knownRansomwareCampaignUse: Unknown
notes: https://security.paloaltonetworks.com/CVE-2025-0111 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0111
cwes: CWE-73
cveID: CVE-2025-23209
vendorProject: Craft CMS
product: Craft CMS
vulnerabilityName: Craft CMS Code Injection Vulnerability
dateAdded: 2025-02-20
shortDescription: Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-13
knownRansomwareCampaignUse: Unknown
notes: https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x ; https://nvd.nist.gov/vuln/detail/CVE-2025-23209
cwes: CWE-94
cveID: CVE-2025-0108
vendorProject: Palo Alto Networks
product: PAN-OS
vulnerabilityName: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
dateAdded: 2025-02-18
shortDescription: Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-11
knownRansomwareCampaignUse: Unknown
notes: https://security.paloaltonetworks.com/CVE-2025-0108 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0108
cwes: CWE-306
cveID: CVE-2024-53704
vendorProject: SonicWall
product: SonicOS
vulnerabilityName: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
dateAdded: 2025-02-18
shortDescription: SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-11
knownRansomwareCampaignUse: Known
notes: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53704
cwes: CWE-287
cveID: CVE-2024-57727
vendorProject: SimpleHelp 
product: SimpleHelp
vulnerabilityName: SimpleHelp Path Traversal Vulnerability
dateAdded: 2025-02-13
shortDescription: SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-06
knownRansomwareCampaignUse: Known
notes: https://simple-help.com/kb---security-vulnerabilities-01-2025 ; Additional CISA Mitigation Instructions: https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-163a ; https://nvd.nist.gov/vuln/detail/CVE-2024-57727
cwes: CWE-22
cveID: CVE-2025-24200
vendorProject: Apple
product: iOS and iPadOS
vulnerabilityName: Apple iOS and iPadOS Incorrect Authorization Vulnerability
dateAdded: 2025-02-12
shortDescription: Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-05
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/122173 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24200
cwes: CWE-863
cveID: CVE-2024-41710
vendorProject: Mitel
product: SIP Phones
vulnerabilityName: Mitel SIP Phones Argument Injection Vulnerability
dateAdded: 2025-02-12
shortDescription: Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection vulnerability due to insufficient parameter sanitization during the boot process. Successful exploitation may allow an attacker to execute arbitrary commands within the context of the system.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-05
knownRansomwareCampaignUse: Unknown
notes: https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0019-001-v2.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-41710
cwes: CWE-88