CVE-2020-7034: Command injection in Avaya Session Border Controller for Enterprise
A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7034?
CVE-2020-7034 is a command injection vulnerability in Avaya Session Border Controller for Enterprise that allows an authenticated, remote attacker to execute arbitrary commands with system privileges.
How does CVE-2020-7034 impact Avaya Session Border Controller for Enterprise?
CVE-2020-7034 allows an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands on the affected system.
What versions of Avaya Session Border Controller for Enterprise are affected by CVE-2020-7034?
Versions between 7.0 and 8.1.2.0 of Avaya Session Border Controller for Enterprise are affected by CVE-2020-7034.
What is the severity of CVE-2020-7034?
CVE-2020-7034 has a severity rating of 8.8, which is considered critical.
Is there a fix available for CVE-2020-7034?
Yes, Avaya has released a fix for CVE-2020-7034. It is recommended to update to a non-vulnerable version as soon as possible.