CVE-2008-3814

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-08 · updated 2026-06-16
Weakness: CWE-287

Description

Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.

Affected products

Cisco Unity: 4.0, 4.0(1), 4.0(2), 4.0(3), 4.0(3)-sr1, 4.0(4) (+8)

References

http://secunia.com/advisories/32187
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml
http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
http://www.securityfocus.com/bid/31638
http://www.securityfocus.com/bid/31642
http://www.securitytracker.com/id?1021011
http://www.voipshield.com/research-details.php?id=126
http://www.vupen.com/english/advisories/2008/2771
https://exchange.xforce.ibmcloud.com/vulnerabilities/45741
http://secunia.com/advisories/32187
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml
http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html

Get alerted when CVE-2008-3814 or the next vulnerability affects your stack