CVE-2020-7034highCWE-78

CVE-2020-7034: high-severity vulnerability in Avaya Session Border Controller for Enterprise

Command injection in Avaya Session Border Controller for Enterprise

Published · Updated

Follow this CVE+ Monitor Session Border Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 2.4%
A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Avaya · Session Border Controller for Enterprise