CVE-2008-3814
Last modified
CVE-2008-3814 is a vulnerability of currently unknown severity. Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.. EPSS estimates a 1.70% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unity | 4.0 |
| Cisco | Unity | 4.0\(1\) |
| Cisco | Unity | 4.0\(2\) |
| Cisco | Unity | 4.0\(3\) |
| Cisco | Unity | 4.0\(4\) |
| Cisco | Unity | 4.0\(5\) |
| Cisco | Unity | 4.1\(1\) |
| Cisco | Unity | 4.2\(1\) |
| Cisco | Unity | 5.0 |
| Cisco | Unity | 5.0\(1\) |
| Cisco | Unity | 7.0 |
| Cisco | Unity | 7.0\(2\) |
References
- http://secunia.com/advisories/32187Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2008/2771Vendor Advisory
- http://secunia.com/advisories/32187Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2008/2771Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3814?
How severe is CVE-2008-3814?
How do I fix CVE-2008-3814?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-3808Unspecified vulnerability in Cisco IOS 12.0 through 12.4 all…
- CVE-2008-3809Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) d…
- CVE-2008-3810Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protoc…
- CVE-2008-3811Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protoc…
- CVE-2008-3812Cisco IOS 12.4, when IOS firewall Application Inspection Con…
- CVE-2008-3813Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when t…
- CVE-2008-3815Unspecified vulnerability in Cisco Adaptive Security Applian…
- CVE-2008-3816Unspecified vulnerability in Cisco Adaptive Security Applian…
- CVE-2008-3817Memory leak in Cisco Adaptive Security Appliances (ASA) 5500…
- CVE-2008-3818Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 1…
- CVE-2008-3819dnsserver in Cisco Application Control Engine Global Site Se…
- CVE-2008-3820Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco …
Are you affected by CVE-2008-3814?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
