Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-4196

Avaya IP Office Web Control RCE Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya IP Office

Default version status: unaffected

  • 0 to < 11.1.3.1affected

References