VulnerabilityModified

CVE-2008-3805

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of…

HIGH 8.5EPSS 3.30%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.30%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 8.5 HIGHAV:N/AC:L/Au:N/C:N/I:P/A:C
EPSS: 3.30% probability · 88th percentile
CISA KEV: Not listed
Affected: cisco/ios
Source: psirt@cisco.com

References

http://secunia.com/advisories/31990Third Party Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=16646Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtmlVendor Advisory
http://www.securitytracker.com/id?1020935Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2670Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910Broken Link
http://secunia.com/advisories/31990Third Party Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=16646Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtmlVendor Advisory
http://www.securitytracker.com/id?1020935Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2670Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910Broken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.