Avaya One-X vulnerabilities

3 CVEs affecting Avaya One-X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-6140, published 2009-02-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-3318, published 2007-06-21. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial…
CVE-2007-3317, published 2007-06-21. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service (device…
CVE-2008-6140, published 2009-02-14. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X Desktop Edition 2.1.0.78 allows remote attackers to cause a denial of service (crash) via unspecified…