PatchSiren

Avaya CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Avaya CVE published 2017-01-23

CVE-2016-2783

CVE-2016-2783 is a critical Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software vulnerability in the handling of VLAN and I-SIS indexes. According to the supplied description, a remote attacker can abuse crafted Ethernet frames to obtain unauthorized access on affected systems. The supplied NVD record classifies the issue as CVSS 3.0 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), wh [truncated]