CVE-2008-6575: Medium severity Avaya Communication Manager vulnerability
Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service (resource consumption) via unknown vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the SIP server (SIP Enablement Services (SES)) component of Avaya Aura Communication Manager to trusted IP ranges via firewall rules or ACLs to minimize exposure to remote authenticated users.
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6575?
The severity of CVE-2008-6575 is categorized as a denial of service vulnerability affecting Avaya Communication Manager.
How do I fix CVE-2008-6575?
To fix CVE-2008-6575, it is recommended to apply any available patches or updates provided by Avaya for Communication Manager.
Which versions of Avaya Communication Manager are affected by CVE-2008-6575?
CVE-2008-6575 affects Avaya Communication Manager versions 3.1.x and 4.x.
Can CVE-2008-6575 be exploited by unauthenticated users?
No, CVE-2008-6575 can only be exploited by authenticated users.
What type of impact can CVE-2008-6575 have on the system?
CVE-2008-6575 can result in resource consumption, leading to a denial of service on the affected Avaya systems.