← Vulnerability feed

Vulnerability record · CVE-2008-6574 · published 1 April 2009

CVE-2008-6574: Avaya communication manager vulnerability

Avaya · Communication Manager

Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials.

7.5 CVSS 2.0 High EPSS 1.4% · top 28.6%
7.5CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/44288
http://secunia.com/advisories/29744 Vendor Advisory
http://www.securityfocus.com/bid/28687
http://www.voipshield.com/research-details.php?id=24
https://exchange.xforce.ibmcloud.com/vulnerabilities/41734
http://osvdb.org/44288
http://secunia.com/advisories/29744 Vendor Advisory
http://www.securityfocus.com/bid/28687
http://www.voipshield.com/research-details.php?id=24
https://exchange.xforce.ibmcloud.com/vulnerabilities/41734

Track CVE-2008-6574 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2008-6708Avaya communication manager vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.1%9.0CVE-2008-6709Avaya sip enablement services vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.4%9.0CVE-2008-6710Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.1%9.0CVE-2008-6711Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.4%9.0CVE-2008-5709Avaya communication manager improper input validation vulnerabilityMultiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, …EPSS 3.3%7.8CVE-2008-6706Avaya sip enablement services vulnerabilityMultiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communica…EPSS 2.3%7.8CVE-2008-2812Linux kernel null pointer dereference vulnerabilityThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or p…EPSS 0.43%7.5CVE-2008-3778Avaya sip enablement services permissions and access controls vulnerabilityThe remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on t…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2008-6574), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.