Unscored severity · published Dec 24, 2008
CVE-2008-5709
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Communication Manager · Avaya
3.1.1; 3.1.2; 3.1.3; 3.1.4; 4.0; 4.0.1; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5709
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5709
Vendor Advisory
http://secunia.com/advisories/32204
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
www.securityfocus.com
http://www.securityfocus.com/bid/31645
www.voipshield.com
http://www.voipshield.com/research-details.php?id=121
www.voipshield.com
http://www.voipshield.com/research-details.php?id=122
www.vupen.com
http://www.vupen.com/english/advisories/2008/2772
More from Communication Manager
7.8
CVE-2008-2812
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via…
7.5
CVE-2018-15617
Communication Manager Denial of Service
–
CVE-2008-6711
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users…
–
CVE-2008-6710
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated…
–
CVE-2008-6709
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote…