Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
| Software | From | Fixed in |
|---|---|---|
| avaya / cajun_p880 | 5.2.14 | 5.2.14.x |
| avaya / cajun_p882 | 5.2.14 | 5.2.14.x |
| avaya / cajun_p580 | 5.2.14 | 5.2.14.x |
| avaya / cajun_p550 | 4.3.5 | 4.3.5.x |
| avaya / cajun_p550r | 5.2.14 | 5.2.14.x |