← Vulnerability feed

Vulnerability record · CVE-2008-5709 · published 24 December 2008

CVE-2008-5709: Avaya communication manager improper input validation vulnerability

Avaya · Communication Manager

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

9.0 CVSS 2.0 High EPSS 3.3% · top 11.8% CWE-20 · Improper input validation
9.0CVSS 2.0 base score
3.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/32204 Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm Vendor Advisory
http://www.securityfocus.com/bid/31645
http://www.voipshield.com/research-details.php?id=121
http://www.voipshield.com/research-details.php?id=122
http://www.vupen.com/english/advisories/2008/2772
https://exchange.xforce.ibmcloud.com/vulnerabilities/45747
https://exchange.xforce.ibmcloud.com/vulnerabilities/45749
http://secunia.com/advisories/32204 Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm Vendor Advisory
http://www.securityfocus.com/bid/31645
http://www.voipshield.com/research-details.php?id=121
http://www.voipshield.com/research-details.php?id=122
http://www.vupen.com/english/advisories/2008/2772
https://exchange.xforce.ibmcloud.com/vulnerabilities/45747
https://exchange.xforce.ibmcloud.com/vulnerabilities/45749

Track CVE-2008-5709 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2008-6708Avaya communication manager vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.1%9.0CVE-2008-6709Avaya sip enablement services vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.4%9.0CVE-2008-6710Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.1%9.0CVE-2008-6711Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.4%7.8CVE-2008-6706Avaya sip enablement services vulnerabilityMultiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communica…EPSS 2.3%7.8CVE-2008-2812Linux kernel null pointer dereference vulnerabilityThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or p…EPSS 0.43%7.5CVE-2008-6574Avaya communication manager vulnerabilityUnspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges an…EPSS 1.4%7.5CVE-2008-3778Avaya sip enablement services permissions and access controls vulnerabilityThe remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on t…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2008-5709), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.