Critical RCE Bug Found Lurking in Avaya VoIP Phones

The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant’s most popular models.