Unrestricted File Upload Vulnerability in Avaya IP Office Customer Call Reporter
CVE-2012-3811

Currently unrated

Key Information:

Vendor
Avaya
Status
Ip Office Customer Call Reporter
Vendor
CVE Published:
3 July 2012

Summary

The Wallboard application in Avaya IP Office Customer Call Reporter contains an unrestricted file upload vulnerability in the ImageUpload.ashx component. This flaw permits remote attackers to upload an executable file, potentially leading to unauthorized code execution on the server. Attackers can exploit this vulnerability by directly accessing the uploaded files, posing significant security risks to the affected systems, particularly in unauthorized environments.

References

http://zerodayinitiative.com/advisories/ZDI-12-106/
x_refsource_MISC
https://downloads.avaya.com/css/P8/documents/100164021
x_refsource_CONFIRM

EPSS Score

77% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.