Lucene search

K
nvd[email protected]NVD:CVE-2008-1748
HistoryMay 16, 2008 - 12:54 p.m.

CVE-2008-1748

2008-05-1612:54:00
CWE-20
web.nvd.nist.gov
4

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.012

Percentile

85.2%

Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.

Affected configurations

Nvd
Node
ciscounified_communications_managerRange4.14.1\(3\)sr7
OR
ciscounified_communications_managerRange4.24.2\(3\)sr4
OR
ciscounified_communications_managerRange4.34.3\(2\)
OR
ciscounified_communications_managerRange5.05.1\(3\)
OR
ciscounified_communications_managerRange6.06.1\(1\)
VendorProductVersionCPE
ciscounified_communications_manager*cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.012

Percentile

85.2%

Related for NVD:CVE-2008-1748