Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sip_enablement_services | Avaya | * | * |
| S8300 | Avaya | * | cm_3.1.2 (including) |
| S8500 | Avaya | * | cm_3.1.2 (including) |
| S8700 | Avaya | * | cm_3.1.2 (including) |