Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2025-1041

Avaya Call Management System RCE vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya Avaya Call Management System

Default version status: unaffected

  • 18.0 to < 19.2.0.7affected
  • 20.0 to < 20.0.1.0affected

References