CVE-2008-1154: Critical severity cisco mobility manager vulnerability
The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1154?
CVE-2008-1154 has been assigned a high severity level due to its potential to allow unauthorized access to critical communications systems.
How do I fix CVE-2008-1154?
To fix CVE-2008-1154, ensure that proper authentication mechanisms are implemented for requests received by the Disaster Recovery Framework in affected Cisco products.
What Cisco products are affected by CVE-2008-1154?
CVE-2008-1154 affects Cisco Unified Communications Manager versions 5.x and 6.x, Unified Presence versions 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x.
What kind of attack can exploit CVE-2008-1154?
CVE-2008-1154 can be exploited for unauthorized manipulation and control of communications settings, potentially leading to service disruptions.
Is there a patch available for CVE-2008-1154?
As of now, Cisco has not publicly disclosed a specific patch for CVE-2008-1154, so users should implement recommended workarounds and security measures.