CRITICAL🇵🇱 Wersja polska

CVE-2016-2783

CVSS 9.8v3.0pub. 2017-01-23upd. 2026-05-13

Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Avaya Vsp Operating System Software

    APP
    Avaya
    5.0.0.0≤ 4.2.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-1041CRITICAL9.9PL ✓same vendor

Zdalne wykonanie poleceń w Avaya Call Management System (CWE-20)

CVE-2024-4196CRITICAL10.0PL ✓same vendor

RCE poprzez improper input validation w Avaya IP Office (Web Control)

CVE-2024-4197CRITICAL9.9PL ✓same vendor

Unrestricted file upload umożliwiający RCE w Avaya IP Office (One-X)

CVE-2022-38168CRITICAL9.1PL ✓same vendor

Pominięcie uwierzytelnienia w Avaya Scopia Pathfinder 10/20 PTS via modyfikacja URL

CVE-2019-7003CRITICAL10.0PL ✓same vendor

SQL Injection w Avaya Control Manager — nieautoryzowany dostęp do danych