Lucene search

K
prionPRIOn knowledge basePRION:CVE-2008-3803
HistorySep 26, 2008 - 4:21 p.m.

Design/Logic Flaw

2008-09-2616:21:00
PRIOn knowledge base
www.prio-n.com
2

6.7 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

A “logic error” in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.

CPENameOperatorVersion
ioseq12.0.0-sz
ioseq12.0.115
ioseq12.0.0-sx

6.7 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

Related for PRION:CVE-2008-3803