CVE-2008-3814: Cisco Unity

Medium severity, CVSS 5.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once.

Affected products

• Cisco Unity: version 4.0 only; version 4.0(1) only; version 4.0(2) only; version 4.0(3) only; version 4.0(4) only; version 4.0(5) only; …

Published 2008-10-08. Last modified 2026-06-16.