PT-2017-11912 · Avaya · Softconsole+1

Hyp3Rlinx + 1 · Published 2017-11-09 · Updated 2019-05-01 · CVE-2017-11309

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avaya IP Office versions prior to 10.1.1

Description A buffer overflow issue in the SoftConsole client allows remote servers to execute arbitrary code via a long response.

Recommendations For versions prior to 10.1.1, update to version 10.1.1 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-11309

Affected Products

Avaya Ip Office

Softconsole

References · 8

• 🔥 http://packetstormsecurity.com/files/144883/Avaya-IP-Office-IPO-10.1-Soft-Console-Remote-Buffer-Overflow.html · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-(IPO)-v9.1.0-10.1-SOFT-CONSOLE-REMOTE-BUFFER-OVERFLOW-0DAY.txt · Exploit
• 🔥 https://exploit-db.com/exploits/43121 · Exploit
• http://downloads.avaya.com/css/P8/documents/101044086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11309 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11309 · Vendor Advisory
• http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-%28IPO%29-v9.1.0-10.1-SOFT-CONSOLE-REMOTE-BUFFER-OVERFLOW-0DAY.txt · Note
• http://securityfocus.com/bid/101674 · Note