CVE-2008-1747
Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.45%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an unspecified SIP INVITE message, aka Bug ID CSCsk46944.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 2.45% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/30238Third Party Advisory
- http://securitytracker.com/id?1020022Third Party Advisory, VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlVendor Advisory
- http://www.securityfocus.com/bid/29221Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1533Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42418Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30238Third Party Advisory
- http://securitytracker.com/id?1020022Third Party Advisory, VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlVendor Advisory
- http://www.securityfocus.com/bid/29221Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1533Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42418Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.