Is CVE-2008-4992 actively exploited?

No active exploitation of CVE-2008-4992 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2008-4992 be exploited remotely?

No. CVE-2008-4992 requires local access to exploit.

What is the CVSS score of CVE-2008-4992?

CVE-2008-4992 has a CVSS score of 4.6 (MEDIUM).

HOME VULNERABILITIESCVE-2008-4992

MEDIUM

CVE-2008-4992

CWE-264Published: November 7, 2008· Updated: Jun 16, 2026

4.6

CVSS v3.1

Official Description

The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors.

NVD Source

Technical Analysis

CVE-2008-4992 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityC

IntegrityNone

AvailabilityNone

AV:L/AC:L/Au:S/C:C/I:N/A:N

Affected Vendors & Products

sun13 product(s)

blade t6300 serverblade t6320 serverfire enterprise server t1000fire enterprise server t2000netra cp3060 servernetra t2000 servernetra t5220 serversparc enterprise server t1000sparc enterprise server t2000sparc enterprise server t5120sparc enterprise server t5140sparc enterprise server t5220+1

Source: NVD CPE · 31 total CPE entries