CVE-2008-6574: High severity Avaya Communication Manager vulnerability
Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict remote access to SIP Enablement Services (SES) endpoints and SES management interfaces by applying network ACLs or firewall rules to allow only trusted IP ranges and administrative networks. Block or rate-limit unauthenticated access from the Internet to SES.
- Operational
Rotate and replace all credentials used by SIP Enablement Services (SES) in Avaya Aura Communication Manager 3.1.x and 4.x. Invalidate and terminate existing SES authentication sessions/tokens to prevent reuse of valid credentials.
- Operational
Increase monitoring and logging for SES authentication activity in Avaya Aura Communication Manager 3.1.x and 4.x; detect and investigate repeated or anomalous reuse of credentials and suspicious authentication patterns, and alert administrators for incident response.
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6574?
CVE-2008-6574 has a moderate severity level due to its potential to allow remote attackers to gain privileges.
How do I fix CVE-2008-6574?
To mitigate CVE-2008-6574, users should apply the latest patches and updates provided by Avaya for Communication Manager.
Which versions of Avaya Communication Manager are affected by CVE-2008-6574?
CVE-2008-6574 affects Avaya Communication Manager versions 3.1.x and 4.x.
Can CVE-2008-6574 lead to denial of service?
Yes, CVE-2008-6574 can cause a denial of service when exploited due to the reuse of valid credentials.
What type of attacks can be executed using CVE-2008-6574?
CVE-2008-6574 can enable remote attackers to gain unauthorized privileges and potentially execute further attacks.