CVEvulnerability

CVE-2024-47113

9.1 CRITICAL Published 2025-01-18 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-91

Description

IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.

Affected configurations

• ibm voice gateway 1.0.2 • ibm voice gateway 1.0.2.4 • ibm voice gateway 1.0.3 • ibm voice gateway 1.0.4 • ibm voice gateway 1.0.5 • ibm voice gateway 1.0.6 • ibm voice gateway 1.0.7 • ibm voice gateway 1.0.7.1 • ibm voice gateway 1.0.8

Related

Weakness · CWE (1)

  • CWE-91 XML Injection weakness

References