Unrated severityNVD Advisory· Published Jul 19, 2023· Updated Oct 22, 2024

Avaya Aura Device Services Remote Code Execution

CVE-2023-3722

Description

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.

Affected products

Avaya/Aura Device Servicesllm-create
Range: <=8.1.4.0
Avaya/Aura Presence Servicescpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

download.avaya.com/css/public/documents/101076366mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000