CVE-2021-25657: Avaya IP Office Privilege Escalation Vulnerability

Q: What is CVE-2021-25657?

CVE-2021-25657 is a privilege escalation vulnerability discovered in Avaya IP Office Admin Lite and USB Creator.

Q: What is the severity of CVE-2021-25657?

The severity of CVE-2021-25657 is high, with a CVSS score of 7.8.

Q: Which software versions are affected by CVE-2021-25657?

CVE-2021-25657 affects Avaya IP Office Admin Lite and USB Creator versions 11.1 Feature Pack 2 Service Pack 1 and earlier.

Q: How can a local user exploit CVE-2021-25657?

A local user can exploit CVE-2021-25657 to escalate privileges.

Q: How can I fix CVE-2021-25657?

To fix CVE-2021-25657, it is recommended to update Avaya IP Office Admin Lite and USB Creator to version 11.1 Feature Pack 2 Service Pack 2 or later.

Published Sep 2, 2022

Updated

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions.

Affected Software

6 affected components

Avaya IP Office<11.1

Avaya IP Office=11.1

Avaya IP Office=11.1-feature_pack1

Avaya IP Office=11.1-feature_pack1_service_pack1

Avaya IP Office=11.1-feature_pack2

Avaya IP Office=11.1-feature_pack2_service_pack1

Remediation

Patch Available

https://support.avaya.com/css/P8/documents/101083319

Event History

Sep 2, 2022

CVE Published

via MITRE·01:05 AM

Data Sourced

via MITRE·01:05 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-25657?

CVE-2021-25657 is a privilege escalation vulnerability discovered in Avaya IP Office Admin Lite and USB Creator.

What is the severity of CVE-2021-25657?

The severity of CVE-2021-25657 is high, with a CVSS score of 7.8.

Which software versions are affected by CVE-2021-25657?