CVE-2008-4543 : Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.

Published 2008-10-13 20:00:02

Updated 2017-08-08 01:32:44

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2008-4543

Cisco » Unity
Versions up to, including, (<=) 7.0\(2\)
cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*
Matching versions
Cisco » Unity
Versions up to, including, (<=) 4.2\(1\)
cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*
Matching versions
Cisco » Unity
Versions up to, including, (<=) 5.0\(1\)
cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(5)
cpe:2.3:a:cisco:unity:4.0\(5\):*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 7.0
cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.1(1)
cpe:2.3:a:cisco:unity:4.1\(1\):*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(2)
cpe:2.3:a:cisco:unity:4.0\(2\):*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(3)
cpe:2.3:a:cisco:unity:4.0\(3\):*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(4)
cpe:2.3:a:cisco:unity:4.0\(4\):*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(4) Update SR1
cpe:2.3:a:cisco:unity:4.0\(4\):sr1:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0
cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 5.0
cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(1)
cpe:2.3:a:cisco:unity:4.0\(1\):*:*:*:*:*:*:*
Matching versions
Cisco » Unity » Version: 4.0(3) Update SR2
cpe:2.3:a:cisco:unity:4.0\(3\):sr2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-4543

EPSS FAQ

2.30%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-4543

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2008-4543

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-4543

Jump to

Vulnerability Details : CVE-2008-4543

Products affected by CVE-2008-4543

Exploit prediction scoring system (EPSS) score for CVE-2008-4543

CVSS scores for CVE-2008-4543

CWE ids for CVE-2008-4543

References for CVE-2008-4543