CVE-2020-7034CWE-78

Command injection in Avaya Session Border Controller for Enterprise

High · published April 23, 2021

CVSS v3.1
7.2
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02367 · 83.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-04-23T20:15Z
EPSS history
Timeline
  • 23 APR 20:15Z
    Command injection in Avaya Session Border Controller for Enterprise
    cvelistv5