Vulnerability Details : CVE-2008-3801
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802.
Vulnerability category: Denial of service
Products affected by CVE-2008-3801
- cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_callmanager:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_callmanager:4.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-3801
7.76%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 94 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-3801
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.1
|
HIGH | AV:N/AC:M/Au:N/C:N/I:N/A:C |
8.6
|
6.9
|
NIST |
References for CVE-2008-3801
-
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml
Vendor Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047
Third Party Advisory
-
http://www.securityfocus.com/bid/31367
Third Party Advisory;VDB Entry
-
http://www.vupen.com/english/advisories/2008/2671
Permissions Required
-
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml
Vendor Advisory
-
http://www.securitytracker.com/id?1020942
Broken Link;Third Party Advisory;VDB Entry
-
http://www.vupen.com/english/advisories/2008/2670
Permissions Required
-
http://www.securitytracker.com/id?1020939
Broken Link;Third Party Advisory;VDB Entry
Jump to