← Back

CVE-2008-3811

nvd nist
Published: Sep 26, 2008Modified: Apr 23, 2026

JSON object

Loading...
7.8
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C
Exploitability: 10.0 / Impact: 6.9
Source: NVD

Description

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810.

Affected (17)

Products: Cisco: Ios
Cisco
1 product
Ios
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Ios
Version 12.4md
Ios
Version 12.4mr
Ios
Version 12.4sw
Ios
Version 12.4t
Ios
Version 12.4xc
Ios
Version 12.4xe
Ios
Version 12.4xf
Ios
Version 12.4xg
Ios
Version 12.4xj
Ios
Version 12.4xk
Ios
Version 12.4xl
Ios
Version 12.4xm
Ios
Version 12.4xn
Ios
Version 12.4xp
Ios
Version 12.4xt
Ios
Version 12.4xv
Ios
Version 12.4xw

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

Source: psirt@cisco.com
Source: psirt@cisco.com
Patch
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.