CVE-2017-11309: Avaya IP Office

Critical severity, CVSS 9.6. EPSS: 9.4% chance of exploitation in the next 30 days.

Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response.

Affected products

• Avaya IP Office: before 10.1.1 (fixed in 10.1.1)

Published 2017-11-10. Last modified 2026-06-17.