CVE-2008-1154

no score yetEPSS 5.1%

The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors.

EPSS: 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2008-04-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:emergency_responder
cisco:mobility_manager
cisco:unified_communications_manager
cisco:unified_presence

References

http://secunia.com/advisories/29670
http://securitytracker.com/id?1019768
http://www.cisco.com/en/US/products/products_security_advisory09186a008096fd9a.shtml
http://www.securityfocus.com/bid/28591
http://www.vupen.com/english/advisories/2008/1093

Check your stack JSON