Skip to content
OpenAdvisories
High · 7.2 CVE-2020-7034 EUVD-2020-28168GHSA-xpcm-7rjr-9h29

Command injection in Avaya Session Border Controller for Enterprise

Published Apr 23, 2021 · Updated Sep 16, 2024 · Assigned by avaya

Description

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x

Affected products

VendorProductAffectedFixed
Avaya Session Border Controller for Enterprise 7.x, 8.0 – ≤ 8.1.1.x —

References