Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2020-7034

Command injection in Avaya Session Border Controller for Enterprise

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya Session Border Controller for Enterprise

  • 7.xaffected
  • 8.0 to ≤ 8.1.1.xaffected

References