CVE-2020-7038

HIGH 7.5CVE-2020-7038 · Published 28/04/2021 · updated 17/06/2026

In short

CVE-2020-7038 is a HIGH (CVSS 7.5) vulnerability affecting equinox conferencing (avaya).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
Fix: update to 9.1.11 or later.

Package	Affected versions	Patched versions
equinox conferencing avaya	`≥ 9.0.0, < 9.1.11`	`9.1.11`

Description

A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.

References

support.avaya.com/css/P8/documents/101075574 · Vendor Advisory

More vulnerabilities in equinox conferencing

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free