5.1

CVE-2008-1156

EPSS 1.01%
Published 27.03.2008 10:44:00
Last modified 09.04.2025 00:30:58
Source psirt@cisco.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.

Affected products Warnungen 0 Metrics 2 CWE 1 References 11

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Cisco Ios Version12.3

Cisco ≫ Cisco Ios Version12.4

Cisco ≫ Ios Version12.0

Cisco ≫ Ios Version12.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.01%	0.761

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.us-cert.gov/cas/techalerts/TA08-087B.html

US Government Resource

http://secunia.com/advisories/29507

http://www.vupen.com/english/advisories/2008/1006/references

http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml

Patch

http://www.securityfocus.com/bid/28464

http://www.securitytracker.com/id?1019715

https://exchange.xforce.ibmcloud.com/vulnerabilities/41468

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648

https://nvd.nist.gov/vuln/detail/CVE-2008-1156

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1156

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1156

EUVD