CVE-2023-3722

Publication date

2023-07-19 19:56:52

Family

avaya

State

PUBLISHED

Description

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.