VulnerabilityModified

CVE-2008-1748

Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service…

HIGH 7.8EPSS 2.45%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.45%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS: 2.45% probability · 83th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: cisco/unified communications manager
Source: psirt@cisco.com

References

http://secunia.com/advisories/30238Third Party Advisory
http://securitytracker.com/id?1020022Third Party Advisory, VDB Entry
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/29221Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1533Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/42419Third Party Advisory, VDB Entry
http://secunia.com/advisories/30238Third Party Advisory
http://securitytracker.com/id?1020022Third Party Advisory, VDB Entry
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/29221Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1533Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/42419Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.