CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.9. It may be remotely exploitable.
CVE
CVE-2025-1041
Severity
CRITICAL
CVSS
9.9
EPSS
0.37%
Original NVD Description
An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)