// For flags

CVE-2008-5709

 

Severity Score

9.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

Múltiples vulnerabilidades sin especificar en la interfaz de gestión web en Avaya Communication Manager (CM) 3.1 antes de 3.1.4 SP2, 4.0 antes de 4.0.3 SP1 y 5.0 antes de 5.0 SP3 permite a usuarios remotamente autentificados ejecutar código de su elección mediante vectores de ataque desconocidos en los componentes (1) Set Static Routes y (2) Backup History.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-12-24 CVE Reserved
  • 2008-12-24 CVE Published
  • 2024-03-19 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
3.1.1
Search vendor "Avaya" for product "Communication Manager" and version "3.1.1"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
3.1.2
Search vendor "Avaya" for product "Communication Manager" and version "3.1.2"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
3.1.3
Search vendor "Avaya" for product "Communication Manager" and version "3.1.3"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
3.1.4
Search vendor "Avaya" for product "Communication Manager" and version "3.1.4"
sp1
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
4.0
Search vendor "Avaya" for product "Communication Manager" and version "4.0"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
4.0.1
Search vendor "Avaya" for product "Communication Manager" and version "4.0.1"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
4.0.1
Search vendor "Avaya" for product "Communication Manager" and version "4.0.1"
sp15215
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
4.0.1
Search vendor "Avaya" for product "Communication Manager" and version "4.0.1"
sp15500
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
4.0.3
Search vendor "Avaya" for product "Communication Manager" and version "4.0.3"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
5.0
Search vendor "Avaya" for product "Communication Manager" and version "5.0"
-
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
5.0
Search vendor "Avaya" for product "Communication Manager" and version "5.0"
sp1
Affected
Avaya
Search vendor "Avaya"
Communication Manager
Search vendor "Avaya" for product "Communication Manager"
5.0
Search vendor "Avaya" for product "Communication Manager" and version "5.0"
sp2
Affected