Vulnerability Details CVE-2008-6709
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or restoring parameters."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.8%
CVSS Severity
CVSS v2 Score 9.0
References
- http://secunia.com/advisories/30751
- http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm
- http://www.osvdb.org/46603
- http://www.securityfocus.com/bid/29939
- http://www.voipshield.com/research-details.php?id=78
- http://www.vupen.com/english/advisories/2008/1943/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43380
- http://secunia.com/advisories/30751
- http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm
- http://www.osvdb.org/46603
- http://www.securityfocus.com/bid/29939
- http://www.voipshield.com/research-details.php?id=78
- http://www.vupen.com/english/advisories/2008/1943/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43380
Products affected by CVE-2008-6709
-
cpe:2.3:a:avaya:communication_manager:3.1
-
cpe:2.3:a:avaya:communication_manager:3.1.1
-
cpe:2.3:a:avaya:communication_manager:3.1.2
-
cpe:2.3:a:avaya:communication_manager:3.1.3
-
cpe:2.3:a:avaya:communication_manager:3.1.4
-
cpe:2.3:a:avaya:communication_manager:3.1.5
-
cpe:2.3:a:avaya:sip_enablement_services:3.0
-
cpe:2.3:a:avaya:sip_enablement_services:3.1
-
cpe:2.3:a:avaya:sip_enablement_services:3.1.1
-
cpe:2.3:a:avaya:sip_enablement_services:4.0