Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sip_enablement_services | Avaya | * | * |
| S8300 | Avaya | * | cm_3.1.2 (including) |
| S8500 | Avaya | * | cm_3.1.2 (including) |
| S8700 | Avaya | * | cm_3.1.2 (including) |