VULNERABILITY INTELLIGENCE

CVE-2008-5709

CVSS score9 HIGH
EPSS probability3.35%
CISA KEVNot currently listed
Published2008-12-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references