CVE-2008-1744

CWE-20 — Improper Input Validation CWE-3994 documents4 sources

Severity

7.8HIGH

EPSS

1.0%

top 22.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Unified Callmanager Cisco Unified Communications Manager

Timeline

PublishedMay 16

Latest updateMay 1

Description

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/unified_communications_manager15 versions+14

▶NVDcisco/unified_callmanager5 versions+4

🔴Vulnerability Details

GHSA

GHSA-xx57-275q-jj4j: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4↗2022-05-01

▶

CVEList

CVE-2008-1744: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4↗2008-05-16

▶

📋Vendor Advisories

Cisco

Cisco Unified Communications Manager Denial of Service Vulnerabilities↗2008-05-14

▶