CVE-2008-5709

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-24 · updated 2026-06-16
Weakness: CWE-20

Description

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

Affected products

Avaya Communication Manager: 3.1.1, 3.1.2, 3.1.3, 3.1.4-sp1, 4.0, 4.0.1 (+6)

References

http://secunia.com/advisories/32204
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
http://www.securityfocus.com/bid/31645
http://www.voipshield.com/research-details.php?id=121
http://www.voipshield.com/research-details.php?id=122
http://www.vupen.com/english/advisories/2008/2772
https://exchange.xforce.ibmcloud.com/vulnerabilities/45747
https://exchange.xforce.ibmcloud.com/vulnerabilities/45749
http://secunia.com/advisories/32204
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
http://www.securityfocus.com/bid/31645
http://www.voipshield.com/research-details.php?id=121

Get alerted when CVE-2008-5709 or the next vulnerability affects your stack