CVE-2008-3800
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.51%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 3.51% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- cisco/unified callmanager · cisco/unified communications manager · cisco/ios
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/31990Third Party Advisory
- http://secunia.com/advisories/32013Third Party Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtmlVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtmlVendor Advisory
- http://www.securityfocus.com/bid/31367Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020939Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020942Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2670Permissions Required
- http://www.vupen.com/english/advisories/2008/2671Permissions Required
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6086Broken Link
- http://secunia.com/advisories/31990Third Party Advisory
- http://secunia.com/advisories/32013Third Party Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtmlVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtmlVendor Advisory
- http://www.securityfocus.com/bid/31367Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020939Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020942Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2670Permissions Required
- http://www.vupen.com/english/advisories/2008/2671Permissions Required
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6086Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.