CVE-2024-4196

Summary

CVE-2024-4196 is a newly disclosed vulnerability affecting Avaya IP Office. This issue stems from an improper input validation flaw in the Web Control component. A malicious actor can exploit this vulnerability by sending a specially crafted web request, potentially leading to remote command or code execution. All versions prior to 11.1.3.1 are reportedly affected. Users are advised to update their systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.