CVE-2021-25654

7.8 highEPSS 0.8%

High (7.8) in avaya aura device services. EPSS 0.8% chance of exploitation in the next 30 days.

An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-378
Published: 2021-06-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_device_services

References

https://support.avaya.com/css/P8/documents/101076523
https://support.avaya.com/css/P8/documents/101076523

Check your stack JSON