CVE-2008-3264

CVE-2008-3264 describes a denial-of-service vulnerability in the FWDOWNL firmware-download implementation of Asterisk Open Source, Business Edition, AsteriskNOW, Appliance Developer Kit, and s800i products. A remote attacker can exploit this flaw by sending a specially crafted IAX2 FWDOWNL request, leading to traffic amplification and a denial of service. With a CVSS score of 7.8, this vulnerability is considered high severity, requiring no authentication and having low attack complexity, resulting in a complete loss of availability. While the FAUCET Risk Score is 80/100, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.