CVE-2021-25657: Avaya IP Office

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions.

Affected products

• Avaya IP Office: before 11.1 (fixed in 11.1); version 11.1 only

Published 2022-09-02. Last modified 2026-06-17.