Skip to content
OpenAdvisories
High WID-SEC-2024-1475 2 CVEs

Avaya IP Office: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 27, 2024 · Updated Jun 30, 2024 · Revision 2 · de-DE

Vendor: Avaya Product: IP Office

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Avaya IP Office ausnutzen, um beliebigen Programmcode auszuführen.

Product

Avaya IP Office ist eine cloudbasierte und On-Premise-Kommunikations- und Kollaborationslösung.

Vulnerabilities 2

  • Critical 10.0
    CVE-2024-4196

    Avaya IP Office Web Control RCE Vulnerability

    An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.

    Avaya IP Office
  • Critical 9.9
    CVE-2024-4197

    Avaya IP Office One-X Portal File Upload Vulnerability

    An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.

    Avaya IP Office

Revision history

  1. #2

    Korrektur Produktzuordnung

  2. #1

    Initiale Fassung

References