critical9.9
CVE-2024-4197
An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component.
Impact
An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avaya | Ip Office | before 11.1.3.1 |