← Database

CVE-2024-4197

CRITICAL CVSS: 9.9 Published: 2024-06-25 Modified: 2026-06-17

Description

An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.

Affected Platforms

Avaya Ip Office

Weakness Type

CWE-434, CWE-434

References