Avaya Argent Office vulnerabilities

4 CVEs affecting Avaya Argent Office, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-1262, published 2001-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2001-1259, published 2001-08-07. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.
CVE-2001-1260, published 2001-08-07. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during…
CVE-2001-1262, published 2001-08-07. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass…
CVE-2001-1261, published 2001-08-07. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.