CVE-2016-2783: Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5....

Security readout for executives and security teams

This flaw affects Avaya VSP switches running older VOSS releases. A remote attacker able to send crafted Ethernet frames could bypass intended VLAN or fabric separation and gain unauthorized network access. The sources do not provide CVSS scoring or active exploitation evidence. Exposure is most relevant where Avaya Fabric Connect VSP devices run affected VOSS versions and accept Ethernet frames from untrusted or semi-trusted network segments. Internet exposure is not indicated by the sources. Treat this as a network segmentation risk for environments using Avaya VSP. Prioritize remediation where these switches separate sensitive business, management, or tenant networks. Mitigation focus: Inventory Avaya VSP devices and record installed VOSS versions.; Upgrade affected VOSS releases to 4.2.3.0, 5.0.1.0, or later vendor-supported versions.; Restrict untrusted Layer 2 access to fabric-connected switch ports..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.