An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.Referenceshttps://www.mutare.com/security-adv-mutare-2021-001-mutare-voice/