VULNERABILITY INTELLIGENCE
CVE-2008-2062
CVSS score5 MEDIUM
EPSS probability2.31%
CISA KEVNot currently listed
Published2008-06-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151.
Primary references
- psirt@cisco.com — Third Party Advisory
- psirt@cisco.com — Patch, Vendor Advisory
- psirt@cisco.com — Third Party Advisory, VDB Entry
- psirt@cisco.com — Third Party Advisory, VDB Entry
- psirt@cisco.com — Permissions Required
- psirt@cisco.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry