Lucene search

K
cve[email protected]CVE-2008-3810
HistorySep 26, 2008 - 4:21 p.m.

CVE-2008-3810

2008-09-2616:21:44
CWE-20
web.nvd.nist.gov
23
cisco
ios
nat
sccp
fragmentation
denial of service
vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.1%

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.

Affected configurations

NVD
Node
ciscoiosMatch12.4md
OR
ciscoiosMatch12.4mr
OR
ciscoiosMatch12.4sw
OR
ciscoiosMatch12.4t
OR
ciscoiosMatch12.4xc
OR
ciscoiosMatch12.4xe
OR
ciscoiosMatch12.4xf
OR
ciscoiosMatch12.4xg
OR
ciscoiosMatch12.4xj
OR
ciscoiosMatch12.4xk
OR
ciscoiosMatch12.4xl
OR
ciscoiosMatch12.4xm
OR
ciscoiosMatch12.4xn
OR
ciscoiosMatch12.4xp
OR
ciscoiosMatch12.4xt
OR
ciscoiosMatch12.4xv
OR
ciscoiosMatch12.4xw

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.1%