CVE-2023-3722 — Avaya Aura Device Services Remote Code Execution
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious …
Published: 2023-07-19 · CVSS: 8.6 · CVSS 3.1
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7