CVE-2016-2783 Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attacke...
CriticalCVSS 9.8
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya vsp operating system software | <= 4.2.2.0 | No fix listed |
| avaya vsp operating system software | = 5.0.0.0 | No fix listed |
References
- 92157 vdb-entry
- packetstormsecurity.com