← CVE Intelligence

CVE-2023-3722

Avaya Aura Device Services Remote Code Execution PUBLISHED

Description (CNA)

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.

Affected (CNA)

Vendor / productVersions
Avaya / Aura Device Servicesaffected 0 before 8.1.4.1

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.