Description
Avaya Aura Device Services是美国Avaya公司的一个应用软件。提供一个管理 Avaya 端点功能。 Avaya Aura Device Services 由于 WebDAV 配置问题，可以导致任意文件上传漏洞。
Avaya Aura Device Services /PhoneBackup/ 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.assetnote.io/resources/research/rce-in-avaya-aura-device-services
https://www.deepwatch.com/labs/customer-advisory-awareness-deepwatch-observes-unauthenticated-remote-code-execution-vulnerability-exploitation-in-avaya-aura-device-services/
https://www.ddpoc.com/DVB-2023-4625.html
https://cn-sec.com/archives/2529886.html
https://github.com/pizza-power/CVE-2023-3722
https://vulners.com/nuclei/NUCLEI:CVE-2023-3722
https://s4e.io/tools/avaya-aura-device-services-os-command-injection-cve-2023-3722
https://download.avaya.com/css/public/documents/101076366
https://pentest-tools.com/vulnerabilities-exploits/avaya-aura-device-services-os-command-injection_27221