Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Attackers chained AhsayCBS authentication bypass (CVE-2024-7479) with command injection (CVE-2024-7480) to deploy XMRig miners disguised as Microsoft Edge processes. The campaign included AI-assisted PowerShell scripts that terminate Task Manager to evade detection. #ZeroDay 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/ahsaycbs-cve-2026-105133-105134-xmrig-cryptojacking-exploit
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | avaya | aura_system_manager | - | - | - |
| App | avaya | aura_system_manager | 10.2 | - | - |