7.8

CVE-2008-3810

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version 12.4md
Cisco ≫ Ios Version 12.4mr
Cisco ≫ Ios Version 12.4sw
Cisco ≫ Ios Version 12.4t
Cisco ≫ Ios Version 12.4xc
Cisco ≫ Ios Version 12.4xe
Cisco ≫ Ios Version 12.4xf
Cisco ≫ Ios Version 12.4xg
Cisco ≫ Ios Version 12.4xj
Cisco ≫ Ios Version 12.4xk
Cisco ≫ Ios Version 12.4xl
Cisco ≫ Ios Version 12.4xm
Cisco ≫ Ios Version 12.4xn
Cisco ≫ Ios Version 12.4xp
Cisco ≫ Ios Version 12.4xt
Cisco ≫ Ios Version 12.4xv
Cisco ≫ Ios Version 12.4xw
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.772
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/31990
http://www.vupen.com/english/advisories/2008/2670
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml
http://www.securityfocus.com/bid/31359
http://www.securitytracker.com/id?1020937
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112