CVE-2008-3778

no score yetEPSS 1.3%

The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-08-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

avaya:communication_manager
avaya:sip_enablement_services

References

http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm
http://www.securityfocus.com/bid/30758
https://exchange.xforce.ibmcloud.com/vulnerabilities/44585
http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm
http://www.securityfocus.com/bid/30758

Check your stack JSON