CVE-2023-3722

—

CVSS 3.1

9.8 critical

EPSS

4%p90

Published

Jul 19, 2023 (Jul 19, 2023)

Modified

Jun 17, 2026

Description

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.

Vendors: avaya
Products: aura device services
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.