Security Advisory

CVE-2023-3722

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-07-19 19:56:52
Last updated 2024-10-22 19:17:58
Assigner avaya
State PUBLISHED

Description

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.