Mitel Audio and Web Conferencing (AWC) Remote Arbitrary Shell Command Injection Vulnerability

Summary
Mitel Audio and Web Conferencing (AWC) is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application.
Solution
The reporter indicates that updates are available Symantec has not confirmed this. Please see the references for details.
References