7.8

CVE-2008-3810

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version12.4md
Cisco ≫ Ios Version12.4mr
Cisco ≫ Ios Version12.4sw
Cisco ≫ Ios Version12.4t
Cisco ≫ Ios Version12.4xc
Cisco ≫ Ios Version12.4xe
Cisco ≫ Ios Version12.4xf
Cisco ≫ Ios Version12.4xg
Cisco ≫ Ios Version12.4xj
Cisco ≫ Ios Version12.4xk
Cisco ≫ Ios Version12.4xl
Cisco ≫ Ios Version12.4xm
Cisco ≫ Ios Version12.4xn
Cisco ≫ Ios Version12.4xp
Cisco ≫ Ios Version12.4xt
Cisco ≫ Ios Version12.4xv
Cisco ≫ Ios Version12.4xw
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.817
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.