CVE:CVE-2021-25657
CNNVD:CNNVD-202209-086
Avaya IP Office是美国Avaya公司的一套小型商务电话系统。
Avaya IP Office 11.1 FP2 SP1 及之前版本存在安全漏洞，该漏洞源于Admin Lite 和 USB Creator允许本地用户提升权限。
solution:Upgrade avaya ip_office to a higher version than 11.1,11.1,11.1:feature_pack1,11.1:feature_pack1_service_pack1,11.1:feature_pack2,11.1:feature_pack2_service_pack1,and avoid the version (,11.1),11.1,11.1:feature_pack1,11.1:feature_pack1_service_pack1,11.1:feature_pack2,11.1:feature_pack2_service_pack1