CVE-2018-11638

Name of the Vulnerable Software and Affected Versions Dialogic PowerMedia XMS versions prior to 3.5

Description The issue allows remote authenticated users to upload malicious code to the web root, resulting in code execution. This is due to the unrestricted upload of files with dangerous types in the administrative console.

Recommendations For versions prior to 3.5, update to version 3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrative console to minimize the risk of exploitation.