CVE-2024-4196

Critical

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a…

avaya·CWE-782·Published 2024-06-25

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

251 chars

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.

NVDen

251 chars

NVDes

312 chars

Se descubrió una vulnerabilidad de validación de entrada incorrecta en Avaya IP Office que podría permitir la ejecución remota de comandos o códigos a través de una solicitud web especialmente manipulada al componente de control web. Las versiones afectadas incluyen todas las versiones anteriores a la 11.1.3.1.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	10.0	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	10.0	3.9	6.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H