ByteOS Network

Vulnerability Details :

CVE-2016-2783

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-23 Jan, 2017 | 21:00

Updated At-05 Aug, 2024 | 23:32

Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:23 Jan, 2017 | 21:00

Updated At:05 Aug, 2024 | 23:32

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/92157	vdb-entry x_refsource_BID
https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html	x_refsource_MISC

Hyperlink: http://www.securityfocus.com/bid/92157

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/92157	vdb-entry x_refsource_BID x_transferred
https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html	x_refsource_MISC x_transferred

Hyperlink: http://www.securityfocus.com/bid/92157

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:23 Jan, 2017 | 21:59

Updated At:20 Apr, 2025 | 01:37

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Avaya LLC

>>vsp_operating_system_software>>Versions up to 4.2.2.0(inclusive)

cpe:2.3:a:avaya:vsp_operating_system_software:*:*:*:*:*:*:*:*

Avaya LLC

>>vsp_operating_system_software>>5.0.0.0

cpe:2.3:a:avaya:vsp_operating_system_software:5.0.0.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-19	Primary	nvd@nist.gov

CWE ID: CWE-19

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/92157	cve@mitre.org	N/A
https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html	cve@mitre.org	N/A
http://www.securityfocus.com/bid/92157	af854a3a-2127-422b-91ae-364da2661108	N/A
https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.securityfocus.com/bid/92157

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/92157

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

7Records found

CVE-2012-3811

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-77.37% / 98.94%

7 Day CHG~0.00%

Published-03 Jul, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.

Vendor-n/a Avaya LLC

Product-ip_office_customer_call_reporter n/a

CVE-2011-5096

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-11.51% / 93.35%

7 Day CHG~0.00%

Published-03 Jul, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

Vendor-n/a Avaya LLC

Product-aura_application_server_5300 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2004-1050

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-75.60% / 98.85%

7 Day CHG~0.00%

Published-18 Nov, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Vendor-n/a Avaya LLC Microsoft Corporation

Product-ip600_media_servers s8100 ie s3400 definity_one_media_server internet_explorer modular_messaging_message_storage_server n/a

CVE-2001-1260

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.52% / 65.80%

7 Day CHG~0.00%

Published-03 May, 2002 | 04:00

Updated-03 Apr, 2025 | 01:03

Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.

Vendor-n/a Avaya LLC

Product-argent_office n/a

CVE-2018-15616

Matching Score-8

Assigner-Avaya, Inc.

View Details

Matching Score-8

Assigner-Avaya, Inc.

CVSS Score-9||CRITICAL

EPSS-4.36% / 88.51%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 19:00

Updated-05 Aug, 2024 | 10:01

System Platform Web UI Deserialization

A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 through 6.3.9 and 6.4.0 through 6.4.2.

Vendor-Avaya LLC

Product-avaya_aura_system_platform Avaya Aura® System Platform

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2004-0201

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-45.13% / 97.51%

7 Day CHG~0.00%

Published-14 Jul, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.

Vendor-n/a Avaya LLC Microsoft Corporation

Product-windows_me windows_98se ip600_media_servers s8100 windows_nt windows_2003_server windows_xp windows_98 definity_one_media_server windows_2000 modular_messaging_message_storage_server n/a

CVE-2004-0212

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-79.93% / 99.07%

7 Day CHG~0.00%

Published-14 Jul, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

Vendor-n/a Avaya LLC Microsoft Corporation

Product-ip600_media_servers s8100 windows_nt windows_xp ie definity_one_media_server windows_2000 modular_messaging_message_storage_server n/a

CVE-2016-2783

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs