CVE-2008-6598

CRITICAL

Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic."

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS1.1%
Percentile65th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-362: Race Condition

Software behavior depends on event timing that is not enforced, allowing attackers to exploit the timing window.

Related Attack Patterns (CAPEC)
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
via CWE-362
CAPEC-26 Leveraging Race Conditions
via CWE-362

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2009. A critical vulnerability affects Sangoma systems (CVE-2008-6598). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2009-GLOBAL-082341-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2008-6598?
This vulnerability was disclosed in 2009. A critical vulnerability affects Sangoma systems (CVE-2008-6598). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2008-6598?
CVE-2008-6598 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 1.1%.
Is CVE-2008-6598 actively exploited?
No confirmed active exploitation of CVE-2008-6598 as of 2026-05-30.
How do I remediate CVE-2008-6598?
Priority: MEDIUM.
What systems are affected by CVE-2008-6598?
CVE-2008-6598 affects Sangoma Wanpipe.
Vulnerability Details
CVE IDCVE-2008-6598
BSIDBS-2009-GLOBAL-082341-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2009-04-03
Last Modified2026-04-23
ICS Relevance0%
Weakness (CWE)
Race Condition
SourceNVD
Official Description

Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic."

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic." CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Sangoma Wanpipe 3.3.0beta 3.3.1beta 3.3.2.1beta 3.3.2beta 3.3.3beta 3.3.4beta
+1 more3.3.5beta
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 6404 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashf4acded78da6a375001f4f61008aad454a34fc82f633ae6354526f867ef2cdfb715e58d0043634b4e69e22ac13feccd7ae0031bc6bea7eb4548670e61833b08a
Related CVEs affecting Sangoma
CVE-2014-7235 10.0 htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording ... CVE-2019-12148 9.8 The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vu... CVE-2017-17430 9.8 Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote... CVE-2019-12147 9.8 The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vu... CVE-2019-19006 9.8 Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and ...
View all Sangoma CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →