Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vsp_operating_system_software | Avaya | * | 4.2.2.0 (including) |
| Vsp_operating_system_software | Avaya | 5.0.0.0 (including) | 5.0.0.0 (including) |