Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
| Software | From | Fixed in |
|---|---|---|
| avaya / s8500 | - | cm_3.1.2.x |
| avaya / sip_enablement_services | - | - |
| avaya / s8700 | - | cm_3.1.2.x |
| avaya / s8300 | - | cm_3.1.2.x |