Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-3722

Avaya Aura Device Services Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya Aura Device Services

Default version status: affected

  • 0 to < 8.1.4.1affected

References