CVE-2024-47113

Published: Jan 18, 2025Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.

Affected (9)

Products: Ibm: Voice Gateway

Ibm

1 product

Voice Gateway

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Voice Gateway	Version 1.0.2.4
Ibm Voice Gateway	Version 1.0.2
Ibm Voice Gateway	Version 1.0.3
Ibm Voice Gateway	Version 1.0.4
Ibm Voice Gateway	Version 1.0.5
Ibm Voice Gateway	Version 1.0.6
Ibm Voice Gateway	Version 1.0.7.1
Ibm Voice Gateway	Version 1.0.7
Ibm Voice Gateway	Version 1.0.8

Related CWEs

CWE-91

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (1)

https://www.ibm.com/support/pages/node/7175791

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.