5

CVE-2008-2062

The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CiscoUnified Communications Manager Version >= 4.2 < 4.2\(3\)sr4
CiscoUnified Communications Manager Version >= 4.3 < 4.3\(2\)sr1
CiscoUnified Communications Manager Version >= 5.0 < 5.1\(3c\)
CiscoUnified Communications Manager Version >= 6.0 < 6.1\(2\)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.68
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N