CVE-2012-3811

EPSS 77.37%
Published 03.07.2012 19:55:04
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Avaya ≫ Ip Office Customer Call Reporter Version7.0

Avaya ≫ Ip Office Customer Call Reporter Version8.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	77.37%	0.989

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://zerodayinitiative.com/advisories/ZDI-12-106/

https://downloads.avaya.com/css/P8/documents/100164021

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2012-3811

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3811

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3811

EUVD