CVE-2012-3811

2012-07-0319:55:04

mitre

web.nvd.nist.gov

121

cve-2012-3811

imageupload.ashx

vulnerability

avaya

ip office

customer call reporter

remote code execution

security

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.968

Percentile

99.7%

JSON

Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.

Affected configurations

Nvd

Node

avayaip_office_customer_call_reporterMatch7.0

avayaip_office_customer_call_reporterMatch8.0

VendorProductVersionCPE
avayaip_office_customer_call_reporter7.0cpe:2.3:a:avaya:ip_office_customer_call_reporter:7.0:*:*:*:*:*:*:*
avayaip_office_customer_call_reporter8.0cpe:2.3:a:avaya:ip_office_customer_call_reporter:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
avaya	ip_office_customer_call_reporter	7.0	cpe:2.3:a:avaya:ip_office_customer_call_reporter:7.0:::::::*
avaya	ip_office_customer_call_reporter	8.0	cpe:2.3:a:avaya:ip_office_customer_call_reporter:8.0:::::::*