CVE-2021-25650: Avaya Aura Utility Services Privilege Escalation Vulnerability
First published: Thu Jun 24 2021(Updated: )
** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services.
Credit: securityalerts@avaya.com securityalerts@avaya.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avaya Aura Utility Services | >=7.0<=7.1.3 | |
| >=7.0<=7.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Avaya Aura Utility Services vulnerability?
The vulnerability ID for this Avaya Aura Utility Services vulnerability is CVE-2021-25650.
What is the severity of CVE-2021-25650?
The severity of CVE-2021-25650 is high with a CVSS score of 8.8.
Which versions of Avaya Aura Utility Services are affected by CVE-2021-25650?
All 7.x versions of Avaya Aura Utility Services are affected by CVE-2021-25650.
What is the impact of CVE-2021-25650?
CVE-2021-25650 can potentially allow a local user to execute specially crafted scripts as a privileged user, resulting in privilege escalation.
Is there a fix available for CVE-2021-25650?
Please refer to the Avaya support website (https://support.avaya.com/css/P8/documents/101072728) for information on available fixes and patches for CVE-2021-25650.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/references
- agent/author
- agent/softwarecombine
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/tags
- agent/event
- agent/first-publish-date
- vendor/avaya
- canonical/avaya aura utility services
- version/avaya aura utility services/7.0
- version/avaya aura utility services/7.1.3