CVE-2021-25654: Avaya Aura Device Services

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services.

Affected products

• Avaya Aura Device Services: from 7.0, up to and including 8.1.4.0

Published 2021-06-25. Last modified 2026-06-17.