CVE-2024-4196

CRITICAL

Avaya IP Office Web Control RCE Vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-4196 has a selected CVSS score of 10.0 (critical).

Description

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 15, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

IP Office

Browse Avaya / IP Office

Default status: unaffected, unknown

CVE ListBefore 11.1.3.1affected
Through 11.1.3.0affected

References

2