CVE-2024-4196 Avaya IP Office Web Control RCE Vulnerability

What is CVE-2024-4196?

CVE-2024-4196 is a critical command injection vulnerability in Avaya IP Office, published on 25 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.

Weakness: CWE-782

Which versions are affected by CVE-2024-4196?

It affects 1 product.

Products include Avaya Ip Office.

How do I fix CVE-2024-4196?

No fix has been published for CVE-2024-4196 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2024-4196 being exploited?

There is no known exploitation of CVE-2024-4196 in the wild and no public exploit code.

Other vulnerabilities in Avaya IP Office

• CVE-2024-4197 Avaya IP Office One-X Portal File Upload Vulnerability Critical 9.9
• CVE-2017-11309 Memory corruption in n/a Critical 9.6
• CVE-2021-25657 Avaya IP Office Privilege Escalation Vulnerability High 7.8
• CVE-2018-15610 Improper access controls in IP Office one-X Portal High 7.3
• CVE-2018-15614 IP Office one-X Portal XSS Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-ffvh-2c66-6xgp.