CVE-2020-7034

8.8 highEPSS 2.4%

High (8.8) in avaya session border controller for enterprise. EPSS 2.4% chance of exploitation in the next 30 days.

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for Enterprise include 7.x, 8.0 through 8.1.1.x

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWEs: CWE-77, CWE-78
Published: 2021-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:session_border_controller_for_enterprise

References

https://downloads.avaya.com/css/P8/documents/101075451
https://downloads.avaya.com/css/P8/documents/101075451

Check your stack JSON