Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cajun_p550 | Avaya | 4.3.5 (including) | 4.3.5 (including) |
| Cajun_p550r | Avaya | 5.2.14 (including) | 5.2.14 (including) |
| Cajun_p580 | Avaya | 5.2.14 (including) | 5.2.14 (including) |
| Cajun_p880 | Avaya | 5.2.14 (including) | 5.2.14 (including) |
| Cajun_p882 | Avaya | 5.2.14 (including) | 5.2.14 (including) |