Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Command injection in Avaya Session Border Controller for Enterprise
Vulnerability Description
A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Avaya Session Border Controller for Enterprise 命令注入漏洞
Vulnerability Description
Avaya Session Border Controller for Enterprise是美国Avaya公司的一个防火墙。一种灵活的，适合特定用途的企业解决方案-包括一组标准安全功能。 Avaya Session Border Controller 存在命令注入漏洞，该漏洞允许经过身份验证的远程攻击者使用受影响的系统特权发送特殊精心制作的消息并执行任意命令。以下产品及版本受到影响：Avaya Session Border Controller for Enterprise include 7.x, 8
CVSS Information
N/A
Vulnerability Type
N/A