At the end of November, we informed our customers of a risk of misuse of their IPOffice PBX.
To complete our information, we relay a recent Avaya publication:

Avaya IP Office Technical Bulletin : IP Office Security Vulnerability