Unrestricted File Upload Vulnerability in Avaya IP Office Customer Call Reporter
CVE-2012-3811

Currently unrated

Key Information:

Vendor

Avaya
Status
Ip Office Customer Call Reporter
Vendor
CVE Published:
3 July 2012

What is CVE-2012-3811?

The Wallboard application in Avaya IP Office Customer Call Reporter contains an unrestricted file upload vulnerability in the ImageUpload.ashx component. This flaw permits remote attackers to upload an executable file, potentially leading to unauthorized code execution on the server. Attackers can exploit this vulnerability by directly accessing the uploaded files, posing significant security risks to the affected systems, particularly in unauthorized environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://zerodayinitiative.com/advisories/ZDI-12-106/
x_refsource_MISC
https://downloads.avaya.com/css/P8/documents/100164021
x_refsource_CONFIRM

EPSS Score

77% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.