Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAvaya Vsp Operating System Software
APPAvaya5.0.0.0≤ 4.2.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-1041CRITICAL9.9PL ✓ten sam vendor
Zdalne wykonanie poleceń w Avaya Call Management System (CWE-20)
CVE-2024-4196CRITICAL10.0PL ✓ten sam vendor
RCE poprzez improper input validation w Avaya IP Office (Web Control)
CVE-2024-4197CRITICAL9.9PL ✓ten sam vendor
Unrestricted file upload umożliwiający RCE w Avaya IP Office (One-X)
CVE-2022-38168CRITICAL9.1ten sam vendor
Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows...
CVE-2019-7003CRITICAL10.0ten sam vendor
A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticat...