CVE-2008-6709 Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execu...
HighCVSS 9.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or restoring parameters."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya sip enablement services | = 3.0 | No fix listed |
| avaya sip enablement services | = 3.1 | No fix listed |
| avaya sip enablement services | = 3.1.1 | No fix listed |
| avaya sip enablement services | = 4.0 | No fix listed |
| avaya communication manager | = 3.1 | No fix listed |
| avaya communication manager | = 3.1.1 | No fix listed |
| avaya communication manager | = 3.1.2 | No fix listed |
| avaya communication manager | = 3.1.3 | No fix listed |
| avaya communication manager | = 3.1.4 | No fix listed |
| avaya communication manager | = 3.1.4-sp1 | No fix listed |
| avaya communication manager | = 3.1.4-sp2 | No fix listed |
| avaya communication manager | = 3.1.5 | No fix listed |
| avaya communication manager | = 3.1.5-sp0 | No fix listed |
References
- 30751 third-party-advisory
- support.avaya.com vendor-advisory
- 46603 vdb-entry
- 29939 vdb-entry
- www.voipshield.com
- ADV-2008-1943 vdb-entry
- avaya-ses-command-execution(43380) vdb-entry