CVE-2025-1041PoC(avaya / call_management_system)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch avaya call_management_system systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.

avaya CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.avaya.com/css/public/documents/101093084

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

call_management_system

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

avaya

Products

call_management_system

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

PoC

1100.0%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2025-1041/

Full discourse1 post

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters138d
PoC
CVE-2025-1041 Critical RCE in Avaya Call Management System via improper input validation. CVSS 9.9. Unpatched. Disable external access now. #CVE #Avaya #InfoSec #cybersecurity #DevOps More #CVEAlerts Patches and POC Labs for free: https://www.valtersit.com/cve/CVE-2025-1041/
Post summary
The text announces a critical RCE (CVE-2025‑1041), provides technical details and a workaround, and explicitly links to a free PoC lab resource.
00000253
904 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	avaya	call_management_system	-	-	-

Explore more

Back to dashboard avaya CVEs call_management_system vulnerabilities