CVE-2008-3801
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802.
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 3.22% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- cisco/unified callmanager · cisco/unified communications manager · cisco/ios
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/31990Third Party Advisory
- http://secunia.com/advisories/32013Third Party Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtmlVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtmlVendor Advisory
- http://www.securityfocus.com/bid/31367Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020939Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020942Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2670Permissions Required
- http://www.vupen.com/english/advisories/2008/2671Permissions Required
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047Third Party Advisory
- http://secunia.com/advisories/31990Third Party Advisory
- http://secunia.com/advisories/32013Third Party Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtmlVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtmlVendor Advisory
- http://www.securityfocus.com/bid/31367Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020939Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020942Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2670Permissions Required
- http://www.vupen.com/english/advisories/2008/2671Permissions Required
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.