CVE-2024-4197: falha crítica em Avaya IP Office
Avaya IP Office One-X Portal File Upload Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.9epss 0.8%
An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Avaya · IP OfficeCVEs relacionadas — Avaya IP Office
No mesmo produto, das mais perigosas para as menos.
CVE-2018-15610HIGHImproper access controls in IP Office one-X PortalEPSS 1.8%CVE-2019-7005MEDIUMUnauthenticated Information Disclosure Vulnerability in IP OfficeEPSS 1.2%CVE-2020-7030MEDIUMIPO Information DisclosureEPSS 1.0%CVE-2018-15614MEDIUMIP Office one-X Portal XSSEPSS 0.6%CVE-2024-4196CRITICALAvaya IP Office Web Control RCE VulnerabilityEPSS 0.6%CVE-2021-25657HIGHAvaya IP Office Privilege Escalation VulnerabilityEPSS 0.3%