{"id":"CVE-2008-1748","aliases":["EUVD-2008-1748","GHSA-3pw9-xq5q-xv5f"],"status":"published","title":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2...","description":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02454,"percentile":0.8451,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2008-05-16T06:54:00Z","modified":"2026-06-16T22:52:24Z","products":[{"vendor":"cisco","product":"unified_communications_manager"}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required"]},{"url":"http://www.securityfocus.com/bid/29221","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42419","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30238","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1748"},{"url":"https://github.com/advisories/GHSA-3pw9-xq5q-xv5f"}],"sources":{"cve":[{"id":"CVE-2008-1748","description":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.","status":"published","published":"2008-05-16T06:54:00Z","modified":"2024-08-07T08:32:01.271Z","updated_at":"2026-11-02T14:34:47.310062Z"}],"euvd":[{"id":"EUVD-2008-1748","description":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.","status":"published","published":"2008-05-16T06:54:00Z","modified":"2024-08-07T08:32:01Z","updated_at":"2026-11-03T01:39:00.197397Z"}],"ghsa":[{"id":"GHSA-3pw9-xq5q-xv5f","title":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2...","description":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.","status":"published","published":"2022-05-01T23:43:12Z","modified":"2023-01-31T05:05:52Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:48:55.758723Z"}],"nvd":[{"id":"CVE-2008-1748","description":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.","status":"published","published":"2008-05-16T12:54:00Z","modified":"2026-06-16T22:52:24.82Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:26.27008Z"}]}}