CVE-2008-3778

CWE-2643 documents3 sources
Severity
7.5HIGH
EPSS
0.5%
top 33.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Avaya Communication ManagerAvaya SIP Enablement Services
Timeline
PublishedAug 25
Latest updateMay 2

Description

The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-h5vm-5rxm-r6wg: The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5↗2022-05-02
▶
CVEList
CVE-2008-3778: The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5↗2008-08-25
▶