Skip to main content

Avaya Releases Security Update

Avaya have released a security update to address a buffer overflow vulnerability in a number of their Voice-over-IP phones. A remote authenticated attacker could exploit this vulnerability to take control of an affected system and extract sensitive information.

Threat ID:
CC-3184
Category:
Threat Severity:
Medium
Threat Vector:
Published:
15 August 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Avaya have released a security update to address a buffer overflow vulnerability in a number of their Voice-over-IP phones. A remote authenticated attacker could exploit this vulnerability to take control of an affected system and extract sensitive information.

Threat details

A remote authenticated attacker could exploit this vulnerability to take control of an affected system and extract sensitive information.

Remediation steps

Type Step

Users and administrators are encouraged to review the Avaya security advisory ASA-2019-128 and apply the necessary updates.

Last edited: 14 February 2020 2:54 pm