Vulnerability in Avaya Ip Office Customer Call Reporter
CVE-2012-3811
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.
EPSS: 0.629 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Avaya Ip_office_customer_call_reporter — versions 7.0, 8.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2012-3811?
- CVE-2012-3811 is a vulnerability in Avaya Ip Office Customer Call Reporter. Published 2012-07-03.
- Is CVE-2012-3811 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.