CVE-2021-25654CWE-378

Avaya Aura Device Services Arbitrary Code Execution Vulnerability

Medium · published June 25, 2021

CVSS v3.1
6.2
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00778 · 55.4th percentile
Weakness
CWE-378 · Creation of Temporary File With Insecure Permissions
Published
2021-06-25T20:15Z
EPSS history
Timeline
  • 25 JUN 20:15Z
    Avaya Aura Device Services Arbitrary Code Execution Vulnerability
    cvelistv5