CVE-2008-1744: Cisco Unified Callmanager

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.

Affected products

• Cisco Unified Callmanager: version 4.1 only; version 4.1_3_sr4 only; version 4.1_3_sr5 only; version 4.1_3_sr5b only; version 4.1_3_sr5c only
• Cisco Unified Communications Manager: version 4.2_3_sr2 only; version 4.2_3_sr2b only; version 4.2_3_sr3 only; version 4.3 only; version 4.3_1_sr1 only; version 5.1_1 only; …

Published 2008-05-16. Last modified 2026-06-16.