// For flags

CVE-2008-4543

 

Severity Score

7.1
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.

Cisco Unity v4.x anteriores a v4.2(1)ES161, 5.x anteriores a v5.0(1)ES53, y v7.x anteriores a v7.0(2)ES8, cuando utilizan autentificación anónima (también conocida como autenticación nativa Unity), permite a atacantes remotos provocar una denegación de servicio (agotamiento de sesión) a través de un gran número de conexiones.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-10-13 CVE Reserved
  • 2008-10-13 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-10-19 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
<= 4.2\(1\)
Search vendor "Cisco" for product "Unity" and version " <= 4.2\(1\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
<= 5.0\(1\)
Search vendor "Cisco" for product "Unity" and version " <= 5.0\(1\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
<= 7.0\(2\)
Search vendor "Cisco" for product "Unity" and version " <= 7.0\(2\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0
Search vendor "Cisco" for product "Unity" and version "4.0"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(1\)
Search vendor "Cisco" for product "Unity" and version "4.0\(1\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(2\)
Search vendor "Cisco" for product "Unity" and version "4.0\(2\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(3\)
Search vendor "Cisco" for product "Unity" and version "4.0\(3\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(3\)
Search vendor "Cisco" for product "Unity" and version "4.0\(3\)"
sr2
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(4\)
Search vendor "Cisco" for product "Unity" and version "4.0\(4\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(4\)
Search vendor "Cisco" for product "Unity" and version "4.0\(4\)"
sr1
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.0\(5\)
Search vendor "Cisco" for product "Unity" and version "4.0\(5\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
4.1\(1\)
Search vendor "Cisco" for product "Unity" and version "4.1\(1\)"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
5.0
Search vendor "Cisco" for product "Unity" and version "5.0"
-
Affected
Cisco
Search vendor "Cisco"
Unity
Search vendor "Cisco" for product "Unity"
7.0
Search vendor "Cisco" for product "Unity" and version "7.0"
-
Affected