CVE-2016-2783

Critical

Published: 23/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before version 4.2.3.0 and 5.x before version 5.0.1.0 does not properly handle VLAN and I-SIS indexes, allowing remote attackers to gain unauthorized access via crafted Ethernet frames.

Risk Assessment

Attackers may exploit this vulnerability to gain control over the system, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor network traffic for potential attack attempts.

Original NVD description (English source)

Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames.