NanoSSL Code Execution

The vulnerability of the NanoSSL library software for ERS3500, ERS3600, ERS4900, and ERS5900 switches is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted POST request...

PT-2022-2388

Name of the Vulnerable Software and Affected Versions Avaya ERS3500, ERS3600, ERS4900, ERS5900 affected versions not specified Description The issue is caused by a buffer overflow in the dynamic memory of the NanoSSL library. It may allow a remote attacker to execute arbitrary code using a...

PT-2022-2384

Name of the Vulnerable Software and Affected Versions Avaya ERS3500, ERS3600, ERS4900, ERS5900 affected versions not specified Description The issue is caused by a buffer overflow in the dynamic memory of the NanoSSL library. It may allow a remote attacker to execute arbitrary code using a...

PT-2022-2385

Name of the Vulnerable Software and Affected Versions ERS3500 affected versions not specified ERS3600 affected versions not specified ERS4900 affected versions not specified ERS5900 affected versions not specified Description The issue is related to errors in processing HTTP headers in the firmwa...