Skip to content
OpenAdvisories
High WID-SEC-2023-1835 1 CVE

Avaya Aura Device Services: Schwachstelle ermöglicht Codeausführung

Published Jul 19, 2023 · Updated Jul 19, 2023 · de-DE

Vendor: Avaya Product: Aura Device Services <= 8.1.4.0

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Avaya Aura Device Services ausnutzen, um beliebigen Programmcode auszuführen.

Product

Avaya Aura Device Services bietet Dienste (z.B. Authentifizierung und Gerätekonfiguration) für Avaya Clients.

Vulnerabilities 1

  • High 8.6
    CVE-2023-3722 Public exploit Scanner template

    Avaya Aura Device Services Remote Code Execution

    An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and e…

    Avaya Aura Device Services

Revision history

  1. #1

    Initiale Fassung

References